REDHAT-BUG-2184061: Medium severity Ruby Time library vulnerability
The Time parser mishandles invalid strings that have specific characters. It causes an increase in execution time for parsing strings to Time objects.
A ReDoS issue was discovered in the Time gem 0.1.0 and 0.2.1 and Time library of Ruby 2.7.7.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2184061?
The severity of REDHAT-BUG-2184061 is considered high due to the potential for a ReDoS attack that can increase execution time.
Which versions are affected by REDHAT-BUG-2184061?
REDHAT-BUG-2184061 affects Time gem versions 0.1.0 and 0.2.1, as well as Ruby Time library version 2.7.7.
How do I fix REDHAT-BUG-2184061?
To fix REDHAT-BUG-2184061, update the Time gem to a version later than 0.2.1 or upgrade your Ruby installation.
What does REDHAT-BUG-2184061 exploit?
REDHAT-BUG-2184061 exploits the Time parser's mishandling of invalid strings, leading to inefficient execution times.
What are the implications of not addressing REDHAT-BUG-2184061?
Not addressing REDHAT-BUG-2184061 may lead to denial-of-service conditions due to increased execution times during string parsing.