Lucene search
GoogleOSV:CVE-2021-41817HistoryJan 01, 2022 - 5:15 a.m.
CVE-2021-41817
2022-01-0105:15:08
Google
osv.dev
15
cve-2021-41817
redos
ruby
date gem
software vulnerability
EPSS
0.005
Percentile
77.4%
Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS (regular expression Denial of Service) via a long string. The fixed versions are 3.2.1, 3.1.2, 3.0.2, and 2.0.1.
References
hackerone.com/reports/1254844
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IUXQCH6FRKANCVZO2Q7D2SQX33FP3KWN/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UTOJGS5IEFDK3UOO7IY4OTTFGHGLSWZF/
security.gentoo.org/glsa/202401-27
www.ruby-lang.org/en/news/2021/11/15/date-parsing-method-regexp-dos-cve-2021-41817/
Related
osv
osv
BIT-ruby-2021-41817
2024-03-06 11:04:47
Regular expression denial of service vulnerability (ReDoS) in date
2021-11-16 00:32:30
ruby2.3 - security update
2021-12-27 00:00:00
hackerone
hackerone
redhatcve
redhatcve
CVE-2021-41817
2021-11-19 21:23:19
debiancve
debiancve
CVE-2021-41817
2022-01-01 05:15:08
freebsd
freebsd
cve
cve
CVE-2021-41817
2022-01-01 05:15:08
veracode
veracode
Regular Expression Denial Of Service (ReDoS)
2021-11-17 06:57:56
prion
prion
Design/Logic Flaw
2022-01-01 05:15:00
amazon
amazon
Medium: ruby
2023-11-09 19:19:00
rubygems
rubygems
Regular Expression Denial of Service Vulnerability of Date Parsing Methods
2021-11-14 21:00:00
ubuntucve
ubuntucve
CVE-2021-41817
2022-01-01 00:00:00
f5
f5
K30272432 : RubyGems vulnerability CVE-2021-41817
2022-06-01 00:00:00
alpinelinux
alpinelinux
CVE-2021-41817
2022-01-01 05:15:08
cvelist
cvelist
CVE-2021-41817
2022-01-01 00:00:00
nessus
nessus
Amazon Linux 2 : ruby (ALAS-2023-2345)
2023-11-15 00:00:00
EulerOS 2.0 SP8 : ruby (EulerOS-SA-2022-1951)
2022-06-22 00:00:00
Rocky Linux 8 : ruby:2.5 (RLSA-2022:5779)
2023-11-07 00:00:00
github
github
Regular expression denial of service vulnerability (ReDoS) in date
2021-11-16 00:32:30
cbl_mariner
cbl_mariner
CVE-2021-41817 affecting package ruby for versions less than 3.1.2-2
2022-04-26 20:17:12
nvd
nvd
CVE-2021-41817
2022-01-01 05:15:08
redhat
redhat
(RHSA-2022:5779) Moderate: ruby:2.5 security update
2022-08-01 09:05:09
oraclelinux
oraclelinux
ruby:2.5 security update
2022-08-03 00:00:00
ruby:2.7 security, bug fix, and enhancement update
2022-09-15 00:00:00
ruby:3.0 security, bug fix, and enhancement update
2022-09-15 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-2853-1)
2021-12-29 00:00:00
Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2022-1951)
2022-06-22 00:00:00
Ubuntu: Security Advisory (USN-5235-1)
2022-01-19 00:00:00
debian
debian
[SECURITY] [DLA 2853-1] ruby2.3 security update
2021-12-28 10:36:26
[SECURITY] [DSA 5067-1] ruby2.7 security update
2022-02-03 19:30:34
[SECURITY] [DSA 5066-1] ruby2.5 security update
2022-02-03 19:26:40
rocky
rocky
ruby:2.5 security update
2022-08-01 09:05:09
ruby:2.7 security, bug fix, and enhancement update
2022-09-13 07:36:49
ruby:3.0 security, bug fix, and enhancement update
2022-09-13 07:36:53
almalinux
almalinux
Moderate: ruby:2.5 security update
2022-08-01 00:00:00
Moderate: ruby:2.7 security, bug fix, and enhancement update
2022-09-13 00:00:00
Moderate: ruby:3.0 security, bug fix, and enhancement update
2022-09-13 00:00:00
ubuntu
ubuntu
Ruby vulnerabilities
2022-01-18 00:00:00
cloudfoundry
cloudfoundry
USN-5235-1: Ruby vulnerabilities | Cloud Foundry
2022-03-09 00:00:00
redos
redos
ROS-20240918-01
2024-09-18 00:00:00
suse
suse
Security update for ruby2.5 (important)
2022-05-03 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2024-4.0-0562
2024-02-08 00:00:00
Important Photon OS Security Update - PHSA-2024-3.0-0732
2024-02-29 00:00:00
fedora
fedora
[SECURITY] Fedora 34 Update: ruby-3.0.4-153.fc34
2022-05-08 02:03:44
[SECURITY] Fedora 35 Update: ruby-3.0.4-153.fc35
2022-05-08 01:48:39
mageia
mageia
Updated ruby packages fix security vulnerability
2021-12-24 00:01:45
gentoo
gentoo
Ruby: Multiple vulnerabilities
2024-01-24 00:00:00