[FREEBSD:6BD2773C-CF1A-11ED-BD44-080027F5FEC9] rubygem-time -- ReDoS vulnerability
Severity
Medium
Affected Packages
6
CVEs
1
ooooooo_q reports:
The Time parser mishandles invalid strings that have
specific characters. It causes an increase in execution
time for parsing strings to Time objects.
Package | Affected Version |
---|---|
![]() |
< 0.2.2 |
![]() |
< 3.2.2,1 |
![]() |
< 3.1.4,1 |
![]() |
< 3.0.6,1 |
![]() |
< 2.7.8,1 |
![]() |
< 2.7.8,1 |
- ID
- FREEBSD:6BD2773C-CF1A-11ED-BD44-080027F5FEC9
- Severity
- medium
- Severity from
- CVE-2023-28756
- URL
- http://vuxml.freebsd.org/freebsd/6bd2773c-cf1a-11ed-bd44-080027f5fec9.html
- Published
-
2023-03-30T00:00:00
(17 months ago) - Modified
-
2023-03-30T00:00:00
(17 months ago) - Rights
- FreeBSD VuXML Security Team
- Other Advisories
-
-
ALAS2-2023-2084
-
ALPINE:CVE-2023-28756
-
ALSA-2023:3821
-
ALSA-2023:7025
-
ALSA-2024:1431
-
ALSA-2024:1576
-
ALSA-2024:3500
-
ALSA-2024:3838
-
ELSA-2023-3821
-
ELSA-2023-7025
-
ELSA-2024-1431
-
ELSA-2024-1576
-
ELSA-2024-3500
-
ELSA-2024-3838
-
FEDORA-2023-6b924d3b75
-
FEDORA-2023-a7be7ea1aa
-
FEDORA-2023-f58d72c700
-
GLSA-202401-27
-
RHSA-2023:3821
-
RHSA-2023:7025
-
RHSA-2024:1431
-
RHSA-2024:1576
-
RHSA-2024:3500
-
RHSA-2024:3838
-
RUBYSEC:TIME-2023-28756
-
SSA:2023-090-01
-
SUSE-SU-2023:4176-1
-
USN-6055-1
-
USN-6087-1
-
USN-6181-1
-
Source | # ID | Name | URL |
---|---|---|---|
FreeBSD VuXML |
|
Type | Package URL | Namespace | Name / Product | Version | Distribution / Platform | Arch | Patch / Fix |
---|---|---|---|---|---|---|---|
Affected | pkg:freebsd/rubygem-time |
![]() |
< 0.2.2 | ||||
Affected | pkg:freebsd/ruby32 |
![]() |
< 3.2.2,1 | ||||
Affected | pkg:freebsd/ruby31 |
![]() |
< 3.1.4,1 | ||||
Affected | pkg:freebsd/ruby30 |
![]() |
< 3.0.6,1 | ||||
Affected | pkg:freebsd/ruby27 |
![]() |
< 2.7.8,1 | ||||
Affected | pkg:freebsd/ruby |
![]() |
< 2.7.8,1 |
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | Exploits | PoC | Pubblication Date | Modification Date |
---|---|---|---|---|---|---|---|---|---|---|---|
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | PoC | Pubblication Date | Modification Date |