Количество 15
Количество 15
BDU:2024-00198
Уязвимость компонентов rfc2396_parser.rb и rfc3986_parser.rb языка программирования Ruby, позволяющее нарушителю вызвать отказ в обслуживании
ROS-20240826-12
Уязвимость ruby
ROS-20230929-01
Множественные уязвимости Puppet
CVE-2023-36617
A ReDoS issue was discovered in the URI component before 0.12.2 for Ruby. The URI parser mishandles invalid URLs that have specific characters. There is an increase in execution time for parsing strings to URI objects with rfc2396_parser.rb and rfc3986_parser.rb. NOTE: this issue exists becuse of an incomplete fix for CVE-2023-28755. Version 0.10.3 is also a fixed version.
CVE-2023-36617
A ReDoS issue was discovered in the URI component before 0.12.2 for Ruby. The URI parser mishandles invalid URLs that have specific characters. There is an increase in execution time for parsing strings to URI objects with rfc2396_parser.rb and rfc3986_parser.rb. NOTE: this issue exists becuse of an incomplete fix for CVE-2023-28755. Version 0.10.3 is also a fixed version.
CVE-2023-36617
A ReDoS issue was discovered in the URI component before 0.12.2 for Ruby. The URI parser mishandles invalid URLs that have specific characters. There is an increase in execution time for parsing strings to URI objects with rfc2396_parser.rb and rfc3986_parser.rb. NOTE: this issue exists becuse of an incomplete fix for CVE-2023-28755. Version 0.10.3 is also a fixed version.
CVE-2023-36617
A ReDoS issue was discovered in the URI component before 0.12.2 for Ruby. The URI parser mishandles invalid URLs that have specific characters. There is an increase in execution time for parsing strings to URI objects with rfc2396_parser.rb and rfc3986_parser.rb. NOTE: this issue exists becuse of an incomplete fix for CVE-2023-28755. Version 0.10.3 is also a fixed version.
CVE-2023-36617
A ReDoS issue was discovered in the URI component before 0.12.2 for Ru ...
GHSA-hww2-5g85-429m
URI gem has ReDoS vulnerability
RLSA-2024:1576
Moderate: ruby:3.1 security, bug fix, and enhancement update
RLSA-2024:1431
Moderate: ruby:3.1 security, bug fix, and enhancement update
ELSA-2024-1576
ELSA-2024-1576: ruby:3.1 security, bug fix, and enhancement update (MODERATE)
ELSA-2024-1431
ELSA-2024-1431: ruby:3.1 security, bug fix, and enhancement update (MODERATE)
RLSA-2024:4499
Moderate: ruby security update
ELSA-2024-4499
ELSA-2024-4499: ruby security update (MODERATE)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2024-00198 Уязвимость компонентов rfc2396_parser.rb и rfc3986_parser.rb языка программирования Ruby, позволяющее нарушителю вызвать отказ в обслуживании | CVSS3: 5.3 | 2% Низкий | около 3 лет назад |
 | ROS-20240826-12 Уязвимость ruby | CVSS3: 5.3 | почти 2 года назад | |
| ROS-20230929-01 Множественные уязвимости Puppet | CVSS3: 7.5 | почти 3 года назад | |
 | CVE-2023-36617 A ReDoS issue was discovered in the URI component before 0.12.2 for Ruby. The URI parser mishandles invalid URLs that have specific characters. There is an increase in execution time for parsing strings to URI objects with rfc2396_parser.rb and rfc3986_parser.rb. NOTE: this issue exists becuse of an incomplete fix for CVE-2023-28755. Version 0.10.3 is also a fixed version. | CVSS3: 5.3 | 2% Низкий | около 3 лет назад |
 | CVE-2023-36617 A ReDoS issue was discovered in the URI component before 0.12.2 for Ruby. The URI parser mishandles invalid URLs that have specific characters. There is an increase in execution time for parsing strings to URI objects with rfc2396_parser.rb and rfc3986_parser.rb. NOTE: this issue exists becuse of an incomplete fix for CVE-2023-28755. Version 0.10.3 is also a fixed version. | CVSS3: 5.3 | 2% Низкий | около 3 лет назад |
 | CVE-2023-36617 A ReDoS issue was discovered in the URI component before 0.12.2 for Ruby. The URI parser mishandles invalid URLs that have specific characters. There is an increase in execution time for parsing strings to URI objects with rfc2396_parser.rb and rfc3986_parser.rb. NOTE: this issue exists becuse of an incomplete fix for CVE-2023-28755. Version 0.10.3 is also a fixed version. | CVSS3: 5.3 | 2% Низкий | около 3 лет назад |
 | CVE-2023-36617 A ReDoS issue was discovered in the URI component before 0.12.2 for Ruby. The URI parser mishandles invalid URLs that have specific characters. There is an increase in execution time for parsing strings to URI objects with rfc2396_parser.rb and rfc3986_parser.rb. NOTE: this issue exists becuse of an incomplete fix for CVE-2023-28755. Version 0.10.3 is also a fixed version. | CVSS3: 5.3 | 2% Низкий | около 3 лет назад |
| CVE-2023-36617 A ReDoS issue was discovered in the URI component before 0.12.2 for Ru ... | CVSS3: 5.3 | 2% Низкий | около 3 лет назад |
| GHSA-hww2-5g85-429m URI gem has ReDoS vulnerability | CVSS3: 5.3 | 2% Низкий | около 3 лет назад |
 | RLSA-2024:1576 Moderate: ruby:3.1 security, bug fix, and enhancement update | больше 2 лет назад | ||
| RLSA-2024:1431 Moderate: ruby:3.1 security, bug fix, and enhancement update | больше 2 лет назад | ||
| ELSA-2024-1576 ELSA-2024-1576: ruby:3.1 security, bug fix, and enhancement update (MODERATE) | больше 2 лет назад | ||
| ELSA-2024-1431 ELSA-2024-1431: ruby:3.1 security, bug fix, and enhancement update (MODERATE) | больше 2 лет назад | ||
| RLSA-2024:4499 Moderate: ruby security update | около 2 лет назад | ||
| ELSA-2024-4499 ELSA-2024-4499: ruby security update (MODERATE) | около 2 лет назад |
Уязвимостей на страницу