[FREEBSD:9B60BBA1-CF18-11ED-BD44-080027F5FEC9] rubygem-uri -- ReDoS vulnerability
Severity
Medium
Affected Packages
6
CVEs
1
Dominic Couture reports:
A ReDoS issue was discovered in the URI component. The URI
parser mishandles invalid URLs that have specific
characters. It causes an increase in execution time for
parsing strings to URI objects.
Package | Affected Version |
---|---|
![]() |
< 0.12.1 |
![]() |
< 3.2.2,1 |
![]() |
< 3.1.4,1 |
![]() |
< 3.0.6,1 |
![]() |
< 2.7.8,1 |
![]() |
< 2.7.8,1 |
- ID
- FREEBSD:9B60BBA1-CF18-11ED-BD44-080027F5FEC9
- Severity
- medium
- Severity from
- CVE-2023-28755
- URL
- http://vuxml.freebsd.org/freebsd/9b60bba1-cf18-11ed-bd44-080027f5fec9.html
- Published
-
2023-03-28T00:00:00
(17 months ago) - Modified
-
2023-03-30T00:00:00
(17 months ago) - Rights
- FreeBSD VuXML Security Team
- Other Advisories
-
-
ALPINE:CVE-2023-28755
-
ALSA-2023:3821
-
ALSA-2023:7025
-
ALSA-2024:1431
-
ALSA-2024:1576
-
ALSA-2024:3500
-
ALSA-2024:3838
-
ELSA-2023-3821
-
ELSA-2023-7025
-
ELSA-2024-1431
-
ELSA-2024-1576
-
ELSA-2024-3500
-
ELSA-2024-3838
-
FEDORA-2023-6b924d3b75
-
FEDORA-2023-a7be7ea1aa
-
FEDORA-2023-f58d72c700
-
FEDORA-2024-31cac8b8ec
-
FEDORA-2024-48bdd3abbf
-
GLSA-202401-27
-
RHSA-2023:3821
-
RHSA-2023:7025
-
RHSA-2024:1431
-
RHSA-2024:1576
-
RHSA-2024:3500
-
RHSA-2024:3838
-
RUBYSEC:URI-2023-28755
-
RUBYSEC:URI-2023-36617
-
SSA:2023-090-01
-
SUSE-SU-2023:4176-1
-
USN-6055-1
-
USN-6055-2
-
USN-6087-1
-
USN-6181-1
-
USN-6219-1
-
Source | # ID | Name | URL |
---|---|---|---|
FreeBSD VuXML |
|
Type | Package URL | Namespace | Name / Product | Version | Distribution / Platform | Arch | Patch / Fix |
---|---|---|---|---|---|---|---|
Affected | pkg:freebsd/rubygem-uri |
![]() |
< 0.12.1 | ||||
Affected | pkg:freebsd/ruby32 |
![]() |
< 3.2.2,1 | ||||
Affected | pkg:freebsd/ruby31 |
![]() |
< 3.1.4,1 | ||||
Affected | pkg:freebsd/ruby30 |
![]() |
< 3.0.6,1 | ||||
Affected | pkg:freebsd/ruby27 |
![]() |
< 2.7.8,1 | ||||
Affected | pkg:freebsd/ruby |
![]() |
< 2.7.8,1 |
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | Exploits | PoC | Pubblication Date | Modification Date |
---|---|---|---|---|---|---|---|---|---|---|---|
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | PoC | Pubblication Date | Modification Date |