A ReDoS issue was discovered in the URI component before 0.12.2 for Ruby. The URI parser mishandles invalid URLs that have specific characters. There is an increase in execution time for parsing strings to URI objects with rfc2396_parser.rb and rfc3986_parser.rb. NOTE: this issue exists becuse of an incomplete fix for CVE-2023-28755. Version 0.10.3 is also a fixed version.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0106 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

    CVE-2021-33621:
    The cgi gem before 0.1.0.2, 0.2.x before 0.2.2, and 0.3.x before 0.3.5 for Ruby allows HTTP response     splitting. This is relevant to applications that use untrusted user input either to generate an HTTP     response or to create a CGI::Cookie object.

    CVE-2023-28755:
    A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1. The URI parser     mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing     strings to URI objects. The fixed versions are 0.12.1, 0.11.1, 0.10.2 and 0.10.0.1.

    CVE-2023-28756:
    A ReDoS issue was discovered in the Time component through 0.2.1 in Ruby through 3.2.1. The Time parser     mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing     strings to Time objects. The fixed versions are 0.1.1 and 0.2.2.

    CVE-2023-36617:
    A ReDoS issue was discovered in the URI component before 0.12.2 for Ruby. The URI parser mishandles     invalid URLs that have specific characters. There is an increase in execution time for parsing strings to     URI objects with rfc2396_parser.rb and rfc3986_parser.rb. NOTE: this issue exists becuse of an incomplete     fix for CVE-2023-28755. Version 0.10.3 is also a fixed version.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0331 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

    CVE-2023-36617:
    A ReDoS issue was discovered in the URI component before 0.12.2 for Ruby. The URI parser mishandles     invalid URLs that have specific characters. There is an increase in execution time for parsing strings to     URI objects with rfc2396_parser.rb and rfc3986_parser.rb. NOTE: this issue exists becuse of an incomplete     fix for CVE-2023-28755. Version 0.10.3 is also a fixed version.

    CVE-2024-27280:
    A buffer-overread issue was discovered in StringIO 3.0.1, as distributed in Ruby 3.0.x through 3.0.6 and     3.1.x through 3.1.4. The ungetbyte and ungetc methods on a StringIO can read past the end of a string, and     a subsequent call to StringIO.gets may return the memory value. 3.0.3 is the main fixed version; however,     for Ruby 3.0 users, a fixed version is stringio 3.0.1.1, and for Ruby 3.1 users, a fixed version is     stringio 3.0.1.2.

    CVE-2024-27281:
    An issue was discovered in RDoc 6.3.3 through 6.6.2, as distributed in Ruby 3.x through 3.3.0. When     parsing .rdoc_options (used for configuration in RDoc) as a YAML file, object injection and resultant     remote code execution are possible because there are no restrictions on the classes that can be restored.
    (When loading the documentation cache, object injection and resultant remote code execution are also     possible if there were a crafted cache.) The main fixed version is 6.6.3.1. For Ruby 3.0 users, a fixed     version is rdoc 6.3.4.1. For Ruby 3.1 users, a fixed version is rdoc 6.4.1.1. For Ruby 3.2 users, a fixed     version is rdoc 6.5.1.1.

    CVE-2024-27282:
    An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex     compiler, it is possible to extract arbitrary heap data relative to the start of the text, including     pointers and sensitive strings. The fixed versions are 3.0.7, 3.1.5, 3.2.4, and 3.3.1.

    CVE-2024-35176:
     REXML is an XML toolkit for Ruby. The REXML gem before 3.2.6 has a denial of service vulnerability when     it parses an XML that has many <s in an attribute value. Those who need to parse untrusted XMLs may be     impacted to this vulnerability. The REXML gem 3.2.7 or later include the patch to fix this vulnerability.
    As a workaround, don't parse untrusted XMLs.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-7747-1 advisory.

    It was discovered that RubyGems incorrectly handled certain regular expressions. An attacker could     possibly use this issue to cause RubyGems to consume resources, leading to a regular expression denial of     service (ReDoS).

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 7.02, has ruby packages installed that are affected by multiple vulnerabilities:

  - A ReDoS issue was discovered in the URI component before 0.12.2 for Ruby. The URI parser mishandles     invalid URLs that have specific characters. There is an increase in execution time for parsing strings to     URI objects with rfc2396_parser.rb and rfc3986_parser.rb. NOTE: this issue exists becuse of an incomplete     fix for CVE-2023-28755. Version 0.10.3 is also a fixed version. (CVE-2023-36617)

  - An issue was discovered in RDoc 6.3.3 through 6.6.2, as distributed in Ruby 3.x through 3.3.0. When     parsing .rdoc_options (used for configuration in RDoc) as a YAML file, object injection and resultant     remote code execution are possible because there are no restrictions on the classes that can be restored.
    (When loading the documentation cache, object injection and resultant remote code execution are also     possible if there were a crafted cache.) The main fixed version is 6.6.3.1. For Ruby 3.0 users, a fixed     version is rdoc 6.3.4.1. For Ruby 3.1 users, a fixed version is rdoc 6.4.1.1. For Ruby 3.2 users, a fixed     version is rdoc 6.5.1.1. (CVE-2024-27281)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0632 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2024-35221:
    Rubygems.org is the Ruby community's gem hosting service. A Gem publisher can cause a Remote DoS when     publishing a Gem. This is due to how Ruby reads the Manifest of Gem files when using     Gem::Specification.from_yaml. from_yaml makes use of SafeYAML.load which allows YAML aliases inside the     YAML-based metadata of a gem. YAML aliases allow for Denial of Service attacks with so-called `YAML-bombs`     (comparable to Billion laughs attacks). This was patched. There is is no action required by users. This     issue is also tracked as GHSL-2024-001 and was discovered by the GitHub security lab.

    CVE-2024-43398:
    REXML is an XML toolkit for Ruby. The REXML gem before 3.3.6 has a DoS vulnerability when it parses an XML     that has many deep elements that have same local name attributes. If you need to parse untrusted XMLs with     tree parser API like REXML::Document.new, you may be impacted to this vulnerability. If you use other     parser APIs such as stream parser API and SAX2 parser API, this vulnerability is not affected. The REXML     gem 3.3.6 or later include the patch to fix the vulnerability.

    CVE-2024-39908:
     REXML is an XML toolkit for Ruby. The REXML gem before 3.3.1 has some DoS vulnerabilities when it parses     an XML that has many specific characters such as `<`, `0` and `%>`. If you need to parse untrusted XMLs,     you many be impacted to these vulnerabilities. The REXML gem 3.3.2 or later include the patches to fix     these vulnerabilities. Users are advised to upgrade. Users unable to upgrade should avoid parsing     untrusted XML strings.

    CVE-2024-35176:
     REXML is an XML toolkit for Ruby. The REXML gem before 3.2.6 has a denial of service vulnerability when     it parses an XML that has many `<`s in an attribute value. Those who need to parse untrusted XMLs may be     impacted to this vulnerability. The REXML gem 3.2.7 or later include the patch to fix this vulnerability.
    As a workaround, don't parse untrusted XMLs.

    CVE-2024-41946:
    REXML is an XML toolkit for Ruby. The REXML gem 3.3.2 has a DoS vulnerability when it parses an XML that     has many entity expansions with SAX2 or pull parser API. The REXML gem 3.3.3 or later include the patch to     fix the vulnerability.

    CVE-2023-36617:
    A ReDoS issue was discovered in the URI component before 0.12.2 for Ruby. The URI parser mishandles     invalid URLs that have specific characters. There is an increase in execution time for parsing strings to     URI objects with rfc2396_parser.rb and rfc3986_parser.rb. NOTE: this issue exists becuse of an incomplete     fix for CVE-2023-28755. Version 0.10.3 is also a fixed version.

    CVE-2024-41123:
    REXML is an XML toolkit for Ruby. The REXML gem before 3.3.2 has some DoS vulnerabilities when it parses     an XML that has many specific characters such as whitespace character, `>]` and `]>`. The REXML gem 3.3.3     or later include the patches to fix these vulnerabilities.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A ReDoS issue was discovered in the URI component before 0.12.2 for Ruby. The URI parser mishandles     invalid URLs that have specific characters. There is an increase in execution time for parsing strings to     URI objects with rfc2396_parser.rb and rfc3986_parser.rb. NOTE: this issue exists becuse of an incomplete     fix for CVE-2023-28755. Version 0.10.3 is also a fixed version. (CVE-2023-36617)

Note that Nessus relies on the presence of the package as reported by the vendor.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-839 advisory.

    A ReDoS issue was discovered in the URI component before 0.12.2 for Ruby. The URI parser mishandles     invalid URLs that have specific characters. There is an increase in execution time for parsing strings to     URI objects with rfc2396_parser.rb and rfc3986_parser.rb. NOTE: this issue exists becuse of an incomplete     fix for CVE-2023-28755. Version 0.10.3 is also a fixed version. (CVE-2023-36617)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AHV installed on the remote host is prior to 20230302.102005. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-20230302.102001 advisory.

  - squashfs_opendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different     vulnerability than CVE-2021-40153. A squashfs filesystem that has been crafted to include a symbolic link     and then contents under the same filename in a filesystem can cause unsquashfs to first create the     symbolic link pointing outside the expected directory, and then the subsequent write operation will cause     the unsquashfs process to write through the symbolic link elsewhere in the filesystem. (CVE-2021-41072)

  - linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login     process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY. (CVE-2024-22365)

  - An issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions 3.12.1, 3.11.7,     3.10.13, 3.9.18, and 3.8.18 and prior. The tempfile.TemporaryDirectory class would dereference symlinks     during cleanup of permissions-related errors. This means users which can run privileged programs are     potentially able to modify permissions of files referenced by symlinks in some circumstances.
    (CVE-2023-6597)

  - An issue was found in the CPython `zipfile` module affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and     3.8.18 and prior. The zipfile module is vulnerable to quoted-overlap zip-bombs which exploit the zip     format to create a zip-bomb with a high compression ratio. The fixed versions of CPython makes the zipfile     module reject zip archives which overlap entries in the archive. (CVE-2024-0450)

  - The DNS message parsing code in `named` includes a section whose computational complexity is overly high.
    It does not cause problems for typical DNS traffic, but crafted queries and responses may cause excessive     CPU load on the affected `named` instance by exploiting this flaw. This issue affects both authoritative     servers and recursive resolvers. This issue affects BIND 9 versions 9.0.0 through 9.16.45, 9.18.0 through     9.18.21, 9.19.0 through 9.19.19, 9.9.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.45-S1, and 9.18.11-S1     through 9.18.21-S1. (CVE-2023-4408)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3858 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3858-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                      Sylvain Beucler     September 02, 2024                            https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : ruby2.7     Version        : 2.7.4-1+deb11u2     CVE ID         : CVE-2021-33621 CVE-2022-28739 CVE-2023-28755 CVE-2023-28756                      CVE-2023-36617 CVE-2024-27280 CVE-2024-27281 CVE-2024-27282     Debian Bug     : 1009957 1024799 1038408 1067802 1069966 1069968

    Several vulnerabilities have been discovered in the interpreter for     the Ruby language, which may result in denial-of-service (DoS),     information leak, and remote code execution.

    CVE-2021-33621

        The cgi gem allows HTTP response splitting. This is relevant to         applications that use untrusted user input either to generate an         HTTP response or to create a CGI::Cookie object.

    CVE-2022-28739

        Buffer over-read occurs in String-to-Float conversion, including         Kernel#Float and String#to_f.

    CVE-2023-28755

        A ReDoS issue was discovered in the URI component. The URI parser         mishandles invalid URLs that have specific characters. It causes         an increase in execution time for parsing strings to URI objects.

    CVE-2023-28756

        A ReDoS issue was discovered in the Time component. The Time         parser mishandles invalid URLs that have specific characters. It         causes an increase in execution time for parsing strings to Time         objects.

    CVE-2023-36617

        Follow-up fix for CVE-2023-28755.

    CVE-2024-27280

        A buffer-overread issue was discovered in StringIO. The ungetbyte         and ungetc methods on a StringIO can read past the end of a         string, and a subsequent call to StringIO.gets may return the         memory value.

    CVE-2024-27281

        When parsing .rdoc_options (used for configuration in RDoc) as a         YAML file, object injection and resultant remote code execution         are possible because there are no restrictions on the classes that         can be restored. (When loading the documentation cache, object         injection and resultant remote code execution are also possible if         there were a crafted cache.)

    CVE-2024-27282

        If attacker-supplied data is provided to the Ruby regex compiler,         it is possible to extract arbitrary heap data relative to the         start of the text, including pointers and sensitive strings.

    For Debian 11 bullseye, these problems have been fixed in version     2.7.4-1+deb11u2.

    We recommend that you upgrade your ruby2.7 packages.

    For the detailed security status of ruby2.7 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/ruby2.7

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the ruby package has been released.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-4499 advisory.

    - Fix ReDoS vulnerability - upstream's incomplete fix for CVE-2023-28755.
      (CVE-2023-36617)       Resolves: RHEL-5614
    - Fix Buffer overread vulnerability in StringIO.
      (CVE-2024-27280)       Resolves: RHEL-34125
    - Fix RCE vulnerability with .rdoc_options in RDoc.
      (CVE-2024-27281)       Resolves: RHEL-34117
    - Fix Arbitrary memory address read vulnerability with Regex search.
      (CVE-2024-27282)       Resolves: RHEL-33867

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:4499 advisory.

    * rubygem-uri: ReDoS vulnerability - upstream's incomplete fix for CVE-2023-28755 (CVE-2023-36617)

    * ruby: Buffer overread vulnerability in StringIO (CVE-2024-27280)

    * ruby: RCE vulnerability with .rdoc_options in RDoc (CVE-2024-27281)

    * ruby: Arbitrary memory address read vulnerability with Regex search (CVE-2024-27282)

    * REXML: DoS parsing an XML with many `<`s in an attribute value (CVE-2024-35176)

Tenable has extracted the preceding description block directly from the Rocky Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:4499 advisory.

    Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text     files and to perform system management tasks.

    Security Fix(es):

    * rubygem-uri: ReDoS vulnerability - upstream's incomplete fix for CVE-2023-28755 (CVE-2023-36617)

    * ruby: Buffer overread vulnerability in StringIO (CVE-2024-27280)

    * ruby: RCE vulnerability with .rdoc_options in RDoc (CVE-2024-27281)

    * ruby: Arbitrary memory address read vulnerability with Regex search (CVE-2024-27282)

    * REXML: DoS parsing an XML with many `<`s in an attribute value (CVE-2024-35176)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-48bdd3abbf advisory.

    Upgrade to Ruby 3.2.4.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-31cac8b8ec advisory.

    Upgrade to Ruby 3.2.4.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:1576 advisory.

  - The cgi gem before 0.1.0.2, 0.2.x before 0.2.2, and 0.3.x before 0.3.5 for Ruby allows HTTP response     splitting. This is relevant to applications that use untrusted user input either to generate an HTTP     response or to create a CGI::Cookie object. (CVE-2021-33621)

  - A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1. The URI parser     mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing     strings to URI objects. The fixed versions are 0.12.1, 0.11.1, 0.10.2 and 0.10.0.1. (CVE-2023-28755)

  - A ReDoS issue was discovered in the Time component through 0.2.1 in Ruby through 3.2.1. The Time parser     mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing     strings to Time objects. The fixed versions are 0.1.1 and 0.2.2. (CVE-2023-28756)

  - A ReDoS issue was discovered in the URI component before 0.12.2 for Ruby. The URI parser mishandles     invalid URLs that have specific characters. There is an increase in execution time for parsing strings to     URI objects with rfc2396_parser.rb and rfc3986_parser.rb. NOTE: this issue exists becuse of an incomplete     fix for CVE-2023-28755. Version 0.10.3 is also a fixed version. (CVE-2023-36617)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:1576 advisory.

    * ruby/cgi-gem: HTTP response splitting in CGI (CVE-2021-33621)
    * ruby: ReDoS vulnerability in URI (CVE-2023-28755)
    * ruby: ReDoS vulnerability - upstream's incomplete fix for CVE-2023-28755 (CVE-2023-36617)
    * ruby: ReDoS vulnerability in Time (CVE-2023-28756)

    Bug Fix(es):

    * ruby/rubygem-irb: IRB has hard dependency on rubygem-rdoc (AlmaLinux-29048)
    * ruby: Ruby cannot read private key in FIPS mode on AlmaLinux 9 (AlmaLinux-12437)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-1576 advisory.

    ruby     [3.1.4-143]
    - Upgrade to Ruby 3.1.4.
      Resolves: RHEL-5586
    - Fix HTTP response splitting in CGI.
      Resolves: RHEL-5591
    - Fix ReDos vulnerability in URI.
      Resolves: RHEL-28919       Resolves: RHEL-5612
    - Fix ReDos vulnerability in Time.
      Resolves: RHEL-28920
    - Make RDoc soft dependency in IRB.
      Resolves: RHEL-5613

    [3.1.2-142]
    - Bypass git submodule test failure on Git >= 2.38.1.
    - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b.
    - Fix for tzdata-2022g.
    - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS.
      Resolves: RHEL-5590
    - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters       Related: RHEL-5590
    - Disable fiddle tests that use FFI closures.
      Related: RHEL-5590

    rubygem-mysql2     [0.5.4-1]
    - New upstream release 0.5.4 by merging Fedora rawhide branch (commit: e21b5b9)       Resolves: rhbz#2063773

    [0.5.3-1]
    - New upstream release 0.5.3 by merging Fedora master branch (commit: 674d475)       Resolves: rhbz#1817135

    rubygem-pg     [1.3.5-1]
    - Update to pg 1.3.5       Related: rhbz#2063773

    [1.2.3-1]
    - Update to pg 1.2.3 by merging Fedora master branch (commit: 5db4d26)       Resolves: rhbz#1817135

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1576 advisory.

    Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text     files and to perform system management tasks.

    The following packages have been upgraded to a later upstream version: ruby (3.1). (RHEL-29052)

    Security Fix(es):

    * ruby/cgi-gem: HTTP response splitting in CGI (CVE-2021-33621)

    * ruby: ReDoS vulnerability in URI (CVE-2023-28755)

    * ruby: ReDoS vulnerability - upstream's incomplete fix for CVE-2023-28755 (CVE-2023-36617)

    * ruby: ReDoS vulnerability in Time (CVE-2023-28756)

    Bug Fix(es):

    * ruby/rubygem-irb: IRB has hard dependency on rubygem-rdoc (RHEL-29048)

    * ruby: Ruby cannot read private key in FIPS mode on RHEL 9 (RHEL-12437)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:1431 advisory.

  - The cgi gem before 0.1.0.2, 0.2.x before 0.2.2, and 0.3.x before 0.3.5 for Ruby allows HTTP response     splitting. This is relevant to applications that use untrusted user input either to generate an HTTP     response or to create a CGI::Cookie object. (CVE-2021-33621)

  - A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1. The URI parser     mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing     strings to URI objects. The fixed versions are 0.12.1, 0.11.1, 0.10.2 and 0.10.0.1. (CVE-2023-28755)

  - A ReDoS issue was discovered in the Time component through 0.2.1 in Ruby through 3.2.1. The Time parser     mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing     strings to Time objects. The fixed versions are 0.1.1 and 0.2.2. (CVE-2023-28756)

  - A ReDoS issue was discovered in the URI component before 0.12.2 for Ruby. The URI parser mishandles     invalid URLs that have specific characters. There is an increase in execution time for parsing strings to     URI objects with rfc2396_parser.rb and rfc3986_parser.rb. NOTE: this issue exists becuse of an incomplete     fix for CVE-2023-28755. Version 0.10.3 is also a fixed version. (CVE-2023-36617)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:1431 advisory.

    * ruby/cgi-gem: HTTP response splitting in CGI (CVE-2021-33621)
    * ruby: ReDoS vulnerability in URI (CVE-2023-28755)
    * ruby: ReDoS vulnerability - upstream's incomplete fix for CVE-2023-28755 (CVE-2023-36617)
    * ruby: ReDoS vulnerability in Time (CVE-2023-28756)

    Bug Fix(es):

    * ruby/rubygem-irb: IRB has hard dependency on rubygem-rdoc (AlmaLinux-28569)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-1431 advisory.

    ruby     [3.1.4-142]
    - Upgrade to Ruby 3.1.4.
      Resolves: RHEL-28565
    - Fix HTTP response splitting in CGI.
      Resolves: RHEL-28564
    - Fix ReDos vulnerability in URI.
      Resolves: RHEL-28567       Resolves: RHEL-28576
    - Fix ReDos vulnerability in Time.
      Resolves: RHEL-28566
    - Make RDoc soft dependency in IRB.
      Resolves: RHEL-28569

    rubygem-abrt     [0.4.0-1]
    - Update to abrt 0.4.0.
      Resolves: rhbz#1842476

    rubygem-mysql2     [0.5.3-3]
    - Fix SSL related test failure by backporting Fedora commit <c33b1cf>.
      Related: RHEL-28565

    rubygem-pg     [1.3.2-1]
    - Update to pg 1.3.2 by merging Fedora rawhide branch (commit: 39bbd1b)       Resolves: rhbz#2063772

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1431 advisory.

    Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text     files and to perform system management tasks.

    The following packages have been upgraded to a later upstream version: ruby (3.1). (RHEL-28565)

    Security Fix(es):

    * ruby/cgi-gem: HTTP response splitting in CGI (CVE-2021-33621)

    * ruby: ReDoS vulnerability in URI (CVE-2023-28755)

    * ruby: ReDoS vulnerability - upstream's incomplete fix for CVE-2023-28755 (CVE-2023-36617)

    * ruby: ReDoS vulnerability in Time (CVE-2023-28756)

    Bug Fix(es):

    * ruby/rubygem-irb: IRB has hard dependency on rubygem-rdoc (RHEL-28569)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A ReDoS issue was discovered in the URI component before 0.12.2 for Ruby. The URI parser mishandles     invalid URLs that have specific characters. There is an increase in execution time for parsing strings to     URI objects with rfc2396_parser.rb and rfc3986_parser.rb. NOTE: this issue exists becuse of an incomplete     fix for CVE-2023-28755. Version 0.10.3 is also a fixed version. (CVE-2023-36617)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6219-1 advisory.

    It was discovered that Ruby incorrectly handled certain regular expressions. An attacker could possibly     use this issue to cause a denial of service. This issue only affected Ubuntu 20.10 and Ubuntu 20.04 LTS.
    (CVE-2023-28755)

    It was discovered that Ruby incorrectly handled certain regular expressions. An attacker could possibly     use this issue to cause a denial of service. This issue exists because of an incomplete fix for     CVE-2023-28755. (CVE-2023-36617)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
276361	TencentOS Server 3: ruby:3.1 (TSSA-2024:0106)	Nessus	Tencent Local Security Checks	high
276250	TencentOS Server 3: ruby (TSSA-2024:0331)	Nessus	Tencent Local Security Checks	critical
265094	Ubuntu 22.04 LTS : RubyGems vulnerability (USN-7747-1)	Nessus	Ubuntu Local Security Checks	medium
242836	NewStart CGSL MAIN 7.02 : ruby Multiple Vulnerabilities (NS-SA-2025-0116)	Nessus	NewStart CGSL Local Security Checks	low
239486	TencentOS Server 4: ruby (TSSA-2024:0632)	Nessus	Tencent Local Security Checks	high
227009	Linux Distros Unpatched Vulnerability : CVE-2023-36617	Nessus	Misc.	medium
215030	Amazon Linux 2023 : ruby3.2, ruby3.2-bundled-gems, ruby3.2-default-gems (ALAS2023-2025-839)	Nessus	Amazon Linux Local Security Checks	medium
208276	Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-20230302.102001)	Nessus	Misc.	medium
206420	Debian dla-3858 : libruby2.7 - security update	Nessus	Debian Local Security Checks	high
204266	Photon OS 5.0: Ruby PHSA-2024-5.0-0247	Nessus	PhotonOS Local Security Checks	medium
202572	Oracle Linux 8 : ruby (ELSA-2024-4499)	Nessus	Oracle Linux Local Security Checks	critical
202386	Rocky Linux 8 : ruby (RLSA-2024:4499)	Nessus	Rocky Linux Local Security Checks	medium
202189	RHEL 8 : ruby (RHSA-2024:4499)	Nessus	Red Hat Local Security Checks	medium
194967	Fedora 38 : ruby (2024-48bdd3abbf)	Nessus	Fedora Local Security Checks	medium
194960	Fedora 39 : ruby (2024-31cac8b8ec)	Nessus	Fedora Local Security Checks	medium
192949	Rocky Linux 9 : ruby:3.1 (RLSA-2024:1576)	Nessus	Rocky Linux Local Security Checks	high
192894	AlmaLinux 9 : ruby:3.1 (ALSA-2024:1576)	Nessus	Alma Linux Local Security Checks	high
192872	Oracle Linux 9 : ruby:3.1 (ELSA-2024-1576)	Nessus	Oracle Linux Local Security Checks	high
192733	RHEL 9 : ruby:3.1 (RHSA-2024:1576)	Nessus	Red Hat Local Security Checks	high
192616	Rocky Linux 8 : ruby:3.1 (RLSA-2024:1431)	Nessus	Rocky Linux Local Security Checks	high
192401	AlmaLinux 8 : ruby:3.1 (ALSA-2024:1431)	Nessus	Alma Linux Local Security Checks	high
192389	Oracle Linux 8 : ruby:3.1 (ELSA-2024-1431)	Nessus	Oracle Linux Local Security Checks	high
192287	RHEL 8 : ruby:3.1 (RHSA-2024:1431)	Nessus	Red Hat Local Security Checks	high
188287	EulerOS 2.0 SP11 : ruby (EulerOS-SA-2023-2868)	Nessus	Huawei Local Security Checks	medium
188193	EulerOS 2.0 SP10 : ruby (EulerOS-SA-2023-2800)	Nessus	Huawei Local Security Checks	medium
188191	EulerOS 2.0 SP10 : ruby (EulerOS-SA-2023-2824)	Nessus	Huawei Local Security Checks	medium
188175	EulerOS 2.0 SP11 : ruby (EulerOS-SA-2023-2851)	Nessus	Huawei Local Security Checks	medium
178208	Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 : Ruby vulnerabilities (USN-6219-1)	Nessus	Ubuntu Local Security Checks	medium

Detections

Analytics

CVE-2023-36617

medium

Tenable Plugins

high

critical

medium

low

high

medium

medium

medium

high

medium

critical

medium

medium

medium

medium

high

high

high

high

high

high

high

high

medium

medium

medium

medium

medium