Lucene search
GoogleOSV:USN-6055-1HistoryMay 04, 2023 - 8:10 a.m.
ruby2.3, ruby2.5, ruby2.7 vulnerabilities
2023-05-0408:10:22
Google
osv.dev
11
ruby
vulnerabilities
denial of service
regular expressions
ubuntu 18.04 lts
ubuntu 20.04 lts
cve-2023-28755
cve-2023-28756
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
5.4 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
69.5%
It was discovered that Ruby incorrectly handled certain regular expressions.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2023-28755)
It was discovered that Ruby incorrectly handled certain regular expressions.
An attacker could possibly use this issue to cause a denial of service.
This issue is being addressed only for Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.
(CVE-2023-28756)
Related
ubuntu
ubuntu
Ruby vulnerabilities
2023-05-18 00:00:00
Ruby vulnerabilities
2023-05-04 00:00:00
Ruby vulnerabilities
2023-06-21 00:00:00
osv
osv
ruby2.3, ruby2.5, ruby2.7 vulnerabilities
2023-05-18 09:35:29
ruby2.5 - security update
2023-06-06 00:00:00
Moderate: ruby:2.7 security, bug fix, and enhancement update
2023-06-27 00:00:00
openvas
openvas
Fedora: Security Advisory for ruby (FEDORA-2023-6b924d3b75)
2023-04-16 00:00:00
Slackware: Security Advisory (SSA:2023-090-01)
2023-04-03 00:00:00
Fedora: Security Advisory for ruby (FEDORA-2023-f58d72c700)
2023-04-23 00:00:00
slackware
slackware
[slackware-security] ruby
2023-03-31 18:29:16
nessus
nessus
Fedora 38 : ruby (2023-6b924d3b75)
2023-04-15 00:00:00
Fedora 36 : ruby (2023-a7be7ea1aa)
2023-04-21 00:00:00
cloudfoundry
cloudfoundry
USN-6055-1: Ruby vulnerabilities | Cloud Foundry
2023-06-30 00:00:00
USN-6087-1: Ruby vulnerabilities | Cloud Foundry
2023-06-05 00:00:00
USN-6055-2: Ruby regression | Cloud Foundry
2023-06-30 00:00:00
debian
debian
[SECURITY] [DLA 3447-1] ruby2.5 security update
2023-06-07 20:38:22
[SECURITY] [DLA 3408-1] jruby security update
2023-04-30 20:58:08
fedora
fedora
[SECURITY] Fedora 36 Update: ruby-3.1.4-175.fc36
2023-04-21 01:25:27
[SECURITY] Fedora 38 Update: ruby-3.2.2-180.fc38
2023-04-15 02:16:08
[SECURITY] Fedora 37 Update: ruby-3.1.4-175.fc37
2023-04-21 02:11:09
rocky
rocky
ruby:2.7 security, bug fix, and enhancement update
2023-08-31 16:54:34
ruby:3.1 security, bug fix, and enhancement update
2024-03-27 04:34:32
ruby:3.1 security, bug fix, and enhancement update
2024-04-05 14:57:12
oraclelinux
oraclelinux
ruby:2.7 security, bug fix, and enhancement update
2023-07-08 00:00:00
ruby:3.1 security, bug fix, and enhancement update
2024-03-20 00:00:00
ruby:2.5 security update
2023-11-18 00:00:00
almalinux
almalinux
Moderate: ruby:2.7 security, bug fix, and enhancement update
2023-06-27 00:00:00
Moderate: ruby:3.1 security, bug fix, and enhancement update
2024-03-19 00:00:00
Moderate: ruby:2.5 security update
2023-11-14 00:00:00
redhat
redhat
github
github
Ruby Time component ReDoS issue
2023-03-31 06:30:15
Ruby URI component ReDoS issue
2023-03-31 06:30:15
URI gem has ReDoS vulnerability
2023-06-29 15:30:34
cgr
cgr
CVE-2023-28756 vulnerabilities
2024-05-19 03:07:16
CVE-2023-28755 vulnerabilities
2024-05-19 03:07:16
debiancve
debiancve
redhatcve
redhatcve
amazon
amazon
Medium: ruby
2023-06-07 23:52:00
nvd
nvd
wolfi
wolfi
CVE-2023-28756 vulnerabilities
2024-07-09 09:08:46
CVE-2023-28755 vulnerabilities
2024-07-09 09:08:46
cvelist
cvelist
cve
cve
freebsd
freebsd
rubygem-time -- ReDoS vulnerability
2023-03-30 00:00:00
rubygem-uri -- ReDoS vulnerability
2023-03-28 00:00:00
ubuntucve
ubuntucve
veracode
veracode
Regular Expression Denial Of Service (ReDoS)
2023-04-04 14:02:35
Regular Expression Denial Of Service (ReDoS)
2023-04-04 14:02:44
Regular Expression Denial Of Service (ReDoS)
2023-06-30 03:59:11
hackerone
hackerone
Internet Bug Bounty: ReDoS( Ruby, Time)
2023-04-01 23:52:39
Internet Bug Bounty: CVE-2023-28755: ReDoS vulnerability in URI
2023-04-13 02:03:53
alpinelinux
alpinelinux
CVE-2023-28755
2023-03-31 04:15:09
CVE-2023-28756
2023-03-31 04:15:09
prion
prion
Authentication flaw
2023-03-31 04:15:00
Authentication flaw
2023-03-31 04:15:00
Design/Logic Flaw
2023-06-29 13:15:00
thn
thn
rubygems
rubygems
ReDoS vulnerability in URI
2023-06-28 21:00:00
photon
photon
Important Photon OS Security Update - PHSA-2024-5.0-0247
2024-04-16 00:00:00
Important Photon OS Security Update - PHSA-2024-4.0-0562
2024-02-08 00:00:00
Important Photon OS Security Update - PHSA-2024-3.0-0732
2024-02-29 00:00:00
gentoo
gentoo
Ruby: Multiple vulnerabilities
2024-01-24 00:00:00
ibm
ibm
oracle
oracle
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00
ics
ics
Siemens SCALANCE XCM-/XRM-300
2024-02-15 12:00:00
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
5.4 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
69.5%
Related for OSV:USN-6055-1