CVE-2021-41817

See a problem?
Source
https://nvd.nist.gov/vuln/detail/CVE-2021-41817
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-41817.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2021-41817
Aliases
Related
Published
2022-01-01T05:15:08Z
Modified
2024-09-11T04:53:07.488103Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS (regular expression Denial of Service) via a long string. The fixed versions are 3.2.1, 3.1.2, 3.0.2, and 2.0.1.

References

Affected packages

Alpine:v3.12 / ruby

Package

Name
ruby
Purl
pkg:apk/alpine/ruby?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.7.5-r0

Affected versions

1.*

1.8.7_p72-r1
1.8.7_p72-r2
1.8.7_p160-r2
1.8.7_p160-r3
1.8.7_p174-r0
1.8.7_p174-r1
1.8.7_p174-r2
1.8.7_p174-r3
1.8.7_p174-r4
1.8.7_p174-r6
1.8.7_p174-r7
1.8.7_p299-r0
1.8.7_p299-r1
1.8.7_p299-r2
1.8.7_p352-r0
1.8.7_p352-r1
1.8.7_p358-r1
1.9.3_p194-r0
1.9.3_p286-r0
1.9.3_p286-r1
1.9.3_p286-r2
1.9.3_p327-r0
1.9.3_p362-r0
1.9.3_p374-r0
1.9.3_p385-r0
1.9.3_p392-r0

2.*

2.0.0_p0-r0
2.0.0_p0-r1
2.0.0_p195-r0
2.0.0_p247-r0
2.0.0_p247-r1
2.0.0_p247-r2
2.0.0_p247-r3
2.0.0_p353-r0
2.0.0_p353-r1
2.0.0_p353-r2
2.0.0_p481-r0
2.1.5-r0
2.1.5-r1
2.2.1-r0
2.2.2-r0
2.2.2-r1
2.2.3-r0
2.2.3-r1
2.2.4-r0
2.3.1-r0
2.3.1-r1
2.3.1-r2
2.3.2-r0
2.3.3-r0
2.3.3-r1
2.3.3-r2
2.3.3-r3
2.4.0-r3
2.4.1-r1
2.4.1-r2
2.4.1-r3
2.4.1-r4
2.4.1-r5
2.4.2-r0
2.4.2-r1
2.4.3-r0
2.5.0-r0
2.5.0-r1
2.5.1-r0
2.5.1-r1
2.5.1-r2
2.5.2-r0
2.5.3-r0
2.5.3-r1
2.5.3-r2
2.5.5-r0
2.6.3-r0
2.6.3-r1
2.6.3-r2
2.6.4-r0
2.6.5-r0
2.6.5-r1
2.6.5-r2
2.6.6-r2
2.6.6-r3
2.6.6-r4
2.7.1-r0
2.7.1-r1
2.7.1-r2
2.7.1-r3
2.7.2-r0
2.7.2-r1
2.7.3-r0
2.7.4-r0

Alpine:v3.13 / ruby

Package

Name
ruby
Purl
pkg:apk/alpine/ruby?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.7.5-r0

Affected versions

1.*

1.8.7_p72-r1
1.8.7_p72-r2
1.8.7_p160-r2
1.8.7_p160-r3
1.8.7_p174-r0
1.8.7_p174-r1
1.8.7_p174-r2
1.8.7_p174-r3
1.8.7_p174-r4
1.8.7_p174-r6
1.8.7_p174-r7
1.8.7_p299-r0
1.8.7_p299-r1
1.8.7_p299-r2
1.8.7_p352-r0
1.8.7_p352-r1
1.8.7_p358-r1
1.9.3_p194-r0
1.9.3_p286-r0
1.9.3_p286-r1
1.9.3_p286-r2
1.9.3_p327-r0
1.9.3_p362-r0
1.9.3_p374-r0
1.9.3_p385-r0
1.9.3_p392-r0

2.*

2.0.0_p0-r0
2.0.0_p0-r1
2.0.0_p195-r0
2.0.0_p247-r0
2.0.0_p247-r1
2.0.0_p247-r2
2.0.0_p247-r3
2.0.0_p353-r0
2.0.0_p353-r1
2.0.0_p353-r2
2.0.0_p481-r0
2.1.5-r0
2.1.5-r1
2.2.1-r0
2.2.2-r0
2.2.2-r1
2.2.3-r0
2.2.3-r1
2.2.4-r0
2.3.1-r0
2.3.1-r1
2.3.1-r2
2.3.2-r0
2.3.3-r0
2.3.3-r1
2.3.3-r2
2.3.3-r3
2.4.0-r3
2.4.1-r1
2.4.1-r2
2.4.1-r3
2.4.1-r4
2.4.1-r5
2.4.2-r0
2.4.2-r1
2.4.3-r0
2.5.0-r0
2.5.0-r1
2.5.1-r0
2.5.1-r1
2.5.1-r2
2.5.2-r0
2.5.3-r0
2.5.3-r1
2.5.3-r2
2.5.5-r0
2.6.3-r0
2.6.3-r1
2.6.3-r2
2.6.4-r0
2.6.5-r0
2.6.5-r1
2.6.5-r2
2.6.6-r2
2.6.6-r3
2.6.6-r4
2.7.1-r0
2.7.1-r1
2.7.1-r2
2.7.1-r3
2.7.1-r4
2.7.1-r5
2.7.2-r0
2.7.2-r1
2.7.2-r2
2.7.2-r3
2.7.2-r4
2.7.3-r0
2.7.4-r0

Alpine:v3.14 / ruby

Package

Name
ruby
Purl
pkg:apk/alpine/ruby?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.7.5-r0

Affected versions

1.*

1.8.7_p72-r1
1.8.7_p72-r2
1.8.7_p160-r2
1.8.7_p160-r3
1.8.7_p174-r0
1.8.7_p174-r1
1.8.7_p174-r2
1.8.7_p174-r3
1.8.7_p174-r4
1.8.7_p174-r6
1.8.7_p174-r7
1.8.7_p299-r0
1.8.7_p299-r1
1.8.7_p299-r2
1.8.7_p352-r0
1.8.7_p352-r1
1.8.7_p358-r1
1.9.3_p194-r0
1.9.3_p286-r0
1.9.3_p286-r1
1.9.3_p286-r2
1.9.3_p327-r0
1.9.3_p362-r0
1.9.3_p374-r0
1.9.3_p385-r0
1.9.3_p392-r0

2.*

2.0.0_p0-r0
2.0.0_p0-r1
2.0.0_p195-r0
2.0.0_p247-r0
2.0.0_p247-r1
2.0.0_p247-r2
2.0.0_p247-r3
2.0.0_p353-r0
2.0.0_p353-r1
2.0.0_p353-r2
2.0.0_p481-r0
2.1.5-r0
2.1.5-r1
2.2.1-r0
2.2.2-r0
2.2.2-r1
2.2.3-r0
2.2.3-r1
2.2.4-r0
2.3.1-r0
2.3.1-r1
2.3.1-r2
2.3.2-r0
2.3.3-r0
2.3.3-r1
2.3.3-r2
2.3.3-r3
2.4.0-r3
2.4.1-r1
2.4.1-r2
2.4.1-r3
2.4.1-r4
2.4.1-r5
2.4.2-r0
2.4.2-r1
2.4.3-r0
2.5.0-r0
2.5.0-r1
2.5.1-r0
2.5.1-r1
2.5.1-r2
2.5.2-r0
2.5.3-r0
2.5.3-r1
2.5.3-r2
2.5.5-r0
2.6.3-r0
2.6.3-r1
2.6.3-r2
2.6.4-r0
2.6.5-r0
2.6.5-r1
2.6.5-r2
2.6.6-r2
2.6.6-r3
2.6.6-r4
2.7.1-r0
2.7.1-r1
2.7.1-r2
2.7.1-r3
2.7.1-r4
2.7.1-r5
2.7.2-r0
2.7.2-r1
2.7.2-r2
2.7.2-r3
2.7.2-r4
2.7.3-r0
2.7.3-r1
2.7.4-r0

Alpine:v3.15 / ruby

Package

Name
ruby
Purl
pkg:apk/alpine/ruby?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.0.3-r0

Affected versions

1.*

1.8.7_p72-r1
1.8.7_p72-r2
1.8.7_p160-r2
1.8.7_p160-r3
1.8.7_p174-r0
1.8.7_p174-r1
1.8.7_p174-r2
1.8.7_p174-r3
1.8.7_p174-r4
1.8.7_p174-r6
1.8.7_p174-r7
1.8.7_p299-r0
1.8.7_p299-r1
1.8.7_p299-r2
1.8.7_p352-r0
1.8.7_p352-r1
1.8.7_p358-r1
1.9.3_p194-r0
1.9.3_p286-r0
1.9.3_p286-r1
1.9.3_p286-r2
1.9.3_p327-r0
1.9.3_p362-r0
1.9.3_p374-r0
1.9.3_p385-r0
1.9.3_p392-r0

2.*

2.0.0_p0-r0
2.0.0_p0-r1
2.0.0_p195-r0
2.0.0_p247-r0
2.0.0_p247-r1
2.0.0_p247-r2
2.0.0_p247-r3
2.0.0_p353-r0
2.0.0_p353-r1
2.0.0_p353-r2
2.0.0_p481-r0
2.1.5-r0
2.1.5-r1
2.2.1-r0
2.2.2-r0
2.2.2-r1
2.2.3-r0
2.2.3-r1
2.2.4-r0
2.3.1-r0
2.3.1-r1
2.3.1-r2
2.3.2-r0
2.3.3-r0
2.3.3-r1
2.3.3-r2
2.3.3-r3
2.4.0-r3
2.4.1-r1
2.4.1-r2
2.4.1-r3
2.4.1-r4
2.4.1-r5
2.4.2-r0
2.4.2-r1
2.4.3-r0
2.5.0-r0
2.5.0-r1
2.5.1-r0
2.5.1-r1
2.5.1-r2
2.5.2-r0
2.5.3-r0
2.5.3-r1
2.5.3-r2
2.5.5-r0
2.6.3-r0
2.6.3-r1
2.6.3-r2
2.6.4-r0
2.6.5-r0
2.6.5-r1
2.6.5-r2
2.6.6-r2
2.6.6-r3
2.6.6-r4
2.7.1-r0
2.7.1-r1
2.7.1-r2
2.7.1-r3
2.7.1-r4
2.7.1-r5
2.7.2-r0
2.7.2-r1
2.7.2-r2
2.7.2-r3
2.7.2-r4
2.7.3-r0
2.7.3-r1
2.7.4-r0
2.7.4-r1
2.7.4-r2

3.*

3.0.2-r0

Alpine:v3.16 / ruby

Package

Name
ruby
Purl
pkg:apk/alpine/ruby?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.0.3-r0

Affected versions

1.*

1.8.7_p72-r1
1.8.7_p72-r2
1.8.7_p160-r2
1.8.7_p160-r3
1.8.7_p174-r0
1.8.7_p174-r1
1.8.7_p174-r2
1.8.7_p174-r3
1.8.7_p174-r4
1.8.7_p174-r6
1.8.7_p174-r7
1.8.7_p299-r0
1.8.7_p299-r1
1.8.7_p299-r2
1.8.7_p352-r0
1.8.7_p352-r1
1.8.7_p358-r1
1.9.3_p194-r0
1.9.3_p286-r0
1.9.3_p286-r1
1.9.3_p286-r2
1.9.3_p327-r0
1.9.3_p362-r0
1.9.3_p374-r0
1.9.3_p385-r0
1.9.3_p392-r0

2.*

2.0.0_p0-r0
2.0.0_p0-r1
2.0.0_p195-r0
2.0.0_p247-r0
2.0.0_p247-r1
2.0.0_p247-r2
2.0.0_p247-r3
2.0.0_p353-r0
2.0.0_p353-r1
2.0.0_p353-r2
2.0.0_p481-r0
2.1.5-r0
2.1.5-r1
2.2.1-r0
2.2.2-r0
2.2.2-r1
2.2.3-r0
2.2.3-r1
2.2.4-r0
2.3.1-r0
2.3.1-r1
2.3.1-r2
2.3.2-r0
2.3.3-r0
2.3.3-r1
2.3.3-r2
2.3.3-r3
2.4.0-r3
2.4.1-r1
2.4.1-r2
2.4.1-r3
2.4.1-r4
2.4.1-r5
2.4.2-r0
2.4.2-r1
2.4.3-r0
2.5.0-r0
2.5.0-r1
2.5.1-r0
2.5.1-r1
2.5.1-r2
2.5.2-r0
2.5.3-r0
2.5.3-r1
2.5.3-r2
2.5.5-r0
2.6.3-r0
2.6.3-r1
2.6.3-r2
2.6.4-r0
2.6.5-r0
2.6.5-r1
2.6.5-r2
2.6.6-r2
2.6.6-r3
2.6.6-r4
2.7.1-r0
2.7.1-r1
2.7.1-r2
2.7.1-r3
2.7.1-r4
2.7.1-r5
2.7.2-r0
2.7.2-r1
2.7.2-r2
2.7.2-r3
2.7.2-r4
2.7.3-r0
2.7.3-r1
2.7.4-r0
2.7.4-r1
2.7.4-r2

3.*

3.0.2-r0

Alpine:v3.17 / ruby

Package

Name
ruby
Purl
pkg:apk/alpine/ruby?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.0.3-r0

Affected versions

1.*

1.8.7_p72-r1
1.8.7_p72-r2
1.8.7_p160-r2
1.8.7_p160-r3
1.8.7_p174-r0
1.8.7_p174-r1
1.8.7_p174-r2
1.8.7_p174-r3
1.8.7_p174-r4
1.8.7_p174-r6
1.8.7_p174-r7
1.8.7_p299-r0
1.8.7_p299-r1
1.8.7_p299-r2
1.8.7_p352-r0
1.8.7_p352-r1
1.8.7_p358-r1
1.9.3_p194-r0
1.9.3_p286-r0
1.9.3_p286-r1
1.9.3_p286-r2
1.9.3_p327-r0
1.9.3_p362-r0
1.9.3_p374-r0
1.9.3_p385-r0
1.9.3_p392-r0

2.*

2.0.0_p0-r0
2.0.0_p0-r1
2.0.0_p195-r0
2.0.0_p247-r0
2.0.0_p247-r1
2.0.0_p247-r2
2.0.0_p247-r3
2.0.0_p353-r0
2.0.0_p353-r1
2.0.0_p353-r2
2.0.0_p481-r0
2.1.5-r0
2.1.5-r1
2.2.1-r0
2.2.2-r0
2.2.2-r1
2.2.3-r0
2.2.3-r1
2.2.4-r0
2.3.1-r0
2.3.1-r1
2.3.1-r2
2.3.2-r0
2.3.3-r0
2.3.3-r1
2.3.3-r2
2.3.3-r3
2.4.0-r3
2.4.1-r1
2.4.1-r2
2.4.1-r3
2.4.1-r4
2.4.1-r5
2.4.2-r0
2.4.2-r1
2.4.3-r0
2.5.0-r0
2.5.0-r1
2.5.1-r0
2.5.1-r1
2.5.1-r2
2.5.2-r0
2.5.3-r0
2.5.3-r1
2.5.3-r2
2.5.5-r0
2.6.3-r0
2.6.3-r1
2.6.3-r2
2.6.4-r0
2.6.5-r0
2.6.5-r1
2.6.5-r2
2.6.6-r2
2.6.6-r3
2.6.6-r4
2.7.1-r0
2.7.1-r1
2.7.1-r2
2.7.1-r3
2.7.1-r4
2.7.1-r5
2.7.2-r0
2.7.2-r1
2.7.2-r2
2.7.2-r3
2.7.2-r4
2.7.3-r0
2.7.3-r1
2.7.4-r0
2.7.4-r1
2.7.4-r2

3.*

3.0.2-r0

Alpine:v3.18 / ruby

Package

Name
ruby
Purl
pkg:apk/alpine/ruby?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.0.3-r0

Affected versions

1.*

1.8.7_p72-r1
1.8.7_p72-r2
1.8.7_p160-r2
1.8.7_p160-r3
1.8.7_p174-r0
1.8.7_p174-r1
1.8.7_p174-r2
1.8.7_p174-r3
1.8.7_p174-r4
1.8.7_p174-r6
1.8.7_p174-r7
1.8.7_p299-r0
1.8.7_p299-r1
1.8.7_p299-r2
1.8.7_p352-r0
1.8.7_p352-r1
1.8.7_p358-r1
1.9.3_p194-r0
1.9.3_p286-r0
1.9.3_p286-r1
1.9.3_p286-r2
1.9.3_p327-r0
1.9.3_p362-r0
1.9.3_p374-r0
1.9.3_p385-r0
1.9.3_p392-r0

2.*

2.0.0_p0-r0
2.0.0_p0-r1
2.0.0_p195-r0
2.0.0_p247-r0
2.0.0_p247-r1
2.0.0_p247-r2
2.0.0_p247-r3
2.0.0_p353-r0
2.0.0_p353-r1
2.0.0_p353-r2
2.0.0_p481-r0
2.1.5-r0
2.1.5-r1
2.2.1-r0
2.2.2-r0
2.2.2-r1
2.2.3-r0
2.2.3-r1
2.2.4-r0
2.3.1-r0
2.3.1-r1
2.3.1-r2
2.3.2-r0
2.3.3-r0
2.3.3-r1
2.3.3-r2
2.3.3-r3
2.4.0-r3
2.4.1-r1
2.4.1-r2
2.4.1-r3
2.4.1-r4
2.4.1-r5
2.4.2-r0
2.4.2-r1
2.4.3-r0
2.5.0-r0
2.5.0-r1
2.5.1-r0
2.5.1-r1
2.5.1-r2
2.5.2-r0
2.5.3-r0
2.5.3-r1
2.5.3-r2
2.5.5-r0
2.6.3-r0
2.6.3-r1
2.6.3-r2
2.6.4-r0
2.6.5-r0
2.6.5-r1
2.6.5-r2
2.6.6-r2
2.6.6-r3
2.6.6-r4
2.7.1-r0
2.7.1-r1
2.7.1-r2
2.7.1-r3
2.7.1-r4
2.7.1-r5
2.7.2-r0
2.7.2-r1
2.7.2-r2
2.7.2-r3
2.7.2-r4
2.7.3-r0
2.7.3-r1
2.7.4-r0
2.7.4-r1
2.7.4-r2

3.*

3.0.2-r0

Alpine:v3.19 / ruby

Package

Name
ruby
Purl
pkg:apk/alpine/ruby?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.0.3-r0

Affected versions

1.*

1.8.7_p72-r1
1.8.7_p72-r2
1.8.7_p160-r2
1.8.7_p160-r3
1.8.7_p174-r0
1.8.7_p174-r1
1.8.7_p174-r2
1.8.7_p174-r3
1.8.7_p174-r4
1.8.7_p174-r6
1.8.7_p174-r7
1.8.7_p299-r0
1.8.7_p299-r1
1.8.7_p299-r2
1.8.7_p352-r0
1.8.7_p352-r1
1.8.7_p358-r1
1.9.3_p194-r0
1.9.3_p286-r0
1.9.3_p286-r1
1.9.3_p286-r2
1.9.3_p327-r0
1.9.3_p362-r0
1.9.3_p374-r0
1.9.3_p385-r0
1.9.3_p392-r0

2.*

2.0.0_p0-r0
2.0.0_p0-r1
2.0.0_p195-r0
2.0.0_p247-r0
2.0.0_p247-r1
2.0.0_p247-r2
2.0.0_p247-r3
2.0.0_p353-r0
2.0.0_p353-r1
2.0.0_p353-r2
2.0.0_p481-r0
2.1.5-r0
2.1.5-r1
2.2.1-r0
2.2.2-r0
2.2.2-r1
2.2.3-r0
2.2.3-r1
2.2.4-r0
2.3.1-r0
2.3.1-r1
2.3.1-r2
2.3.2-r0
2.3.3-r0
2.3.3-r1
2.3.3-r2
2.3.3-r3
2.4.0-r3
2.4.1-r1
2.4.1-r2
2.4.1-r3
2.4.1-r4
2.4.1-r5
2.4.2-r0
2.4.2-r1
2.4.3-r0
2.5.0-r0
2.5.0-r1
2.5.1-r0
2.5.1-r1
2.5.1-r2
2.5.2-r0
2.5.3-r0
2.5.3-r1
2.5.3-r2
2.5.5-r0
2.6.3-r0
2.6.3-r1
2.6.3-r2
2.6.4-r0
2.6.5-r0
2.6.5-r1
2.6.5-r2
2.6.6-r2
2.6.6-r3
2.6.6-r4
2.7.1-r0
2.7.1-r1
2.7.1-r2
2.7.1-r3
2.7.1-r4
2.7.1-r5
2.7.2-r0
2.7.2-r1
2.7.2-r2
2.7.2-r3
2.7.2-r4
2.7.3-r0
2.7.3-r1
2.7.4-r0
2.7.4-r1
2.7.4-r2

3.*

3.0.2-r0

Alpine:v3.20 / ruby

Package

Name
ruby
Purl
pkg:apk/alpine/ruby?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.0.3-r0

Debian:11 / ruby2.7

Package

Name
ruby2.7
Purl
pkg:deb/debian/ruby2.7?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.7.4-1+deb11u1

Affected versions

2.*

2.7.4-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Git / github.com/ruby/date

Affected ranges

Type
GIT
Repo
https://github.com/ruby/date
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
4f9b8e946ba98f0a1774f8e677baa4a45637ebb3
Type
GIT
Repo
https://github.com/ruby/ruby
Events
Introduced
95aff214687a5e12c3eb57d056665741e734c188
Fixed
0db68f023372b634603c74fca94588b457be084c

Affected versions

v0.*

v0.0.1

v1.*

v1.0.0

v2.*

v2.0.0

Other

v3_0_0
v3_0_1