[FREEBSD:6916EA94-4628-11EC-BBE2-0800270512F4] rubygem-date -- Regular Expression Denial of Service Vunlerability of Date Parsing Methods

Severity High
Affected Packages 5
CVEs 1

Stanislav Valkanov reports:

    Date's parsing methods including Date.parse
    are using Regexps internally, some of which are vulnerable
    against regular expression denial of service. Applications
    and libraries that apply such methods to untrusted input
    may be affected.
Package Affected Version
pkg:freebsd/rubygem-date < 3.2.1
pkg:freebsd/ruby30 < 3.0.3,1
pkg:freebsd/ruby27 < 2.7.5,1
pkg:freebsd/ruby26 < 2.6.9,1
pkg:freebsd/ruby < 2.6.9,1
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:freebsd/rubygem-date rubygem-date < 3.2.1
Affected pkg:freebsd/ruby30 ruby30 < 3.0.3,1
Affected pkg:freebsd/ruby27 ruby27 < 2.7.5,1
Affected pkg:freebsd/ruby26 ruby26 < 2.6.9,1
Affected pkg:freebsd/ruby ruby < 2.6.9,1
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date
Loading...