CVE-2023-28755 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2023-28755 Interim 1 8 2023-09-12T23:19:29Z current 2023-03-29T23:14:05Z 2023-09-12T23:19:29Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2023-28755 A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1. The URI parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to URI objects. The fixed versions are 0.12.1, 0.11.1, 0.10.2 and 0.10.0.1. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE CaaS Platform 4.0 SUSE Enterprise Storage 7 SUSE Enterprise Storage 7.1 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Real Time 15 SP3 SUSE Linux Enterprise Server 11 SP3 for Teradata SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Server Teradata 12 SP3-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Manager Proxy 4.2 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Manager Retail Branch Server 4.2 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Manager Server 4.2 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 9 openSUSE Tumbleweed libruby2_1-2_1 libruby3_1-3_1-3.1.4-1.1 libruby3_2-3_2-3.2.2-1.1 ruby ruby-devel ruby2.1 ruby2.1-devel ruby2.1-stdlib ruby3.1-3.1.4-1.1 ruby3.1-devel-3.1.4-1.1 ruby3.1-devel-extra-3.1.4-1.1 ruby3.1-doc-3.1.4-1.1 ruby3.1-doc-ri-3.1.4-1.1 ruby3.2-3.2.2-1.1 ruby3.2-devel-3.2.2-1.1 ruby3.2-devel-extra-3.2.2-1.1 ruby3.2-doc-3.2.2-1.1 ruby3.2-doc-ri-3.2.2-1.1 libruby3_1-3_1-3.1.4-1.1 as a component of openSUSE Tumbleweed libruby3_2-3_2-3.2.2-1.1 as a component of openSUSE Tumbleweed ruby3.1-3.1.4-1.1 as a component of openSUSE Tumbleweed ruby3.1-devel-3.1.4-1.1 as a component of openSUSE Tumbleweed ruby3.1-devel-extra-3.1.4-1.1 as a component of openSUSE Tumbleweed ruby3.1-doc-3.1.4-1.1 as a component of openSUSE Tumbleweed ruby3.1-doc-ri-3.1.4-1.1 as a component of openSUSE Tumbleweed ruby3.2-3.2.2-1.1 as a component of openSUSE Tumbleweed ruby3.2-devel-3.2.2-1.1 as a component of openSUSE Tumbleweed ruby3.2-devel-extra-3.2.2-1.1 as a component of openSUSE Tumbleweed ruby3.2-doc-3.2.2-1.1 as a component of openSUSE Tumbleweed ruby3.2-doc-ri-3.2.2-1.1 as a component of openSUSE Tumbleweed ruby as a component of SUSE CaaS Platform 4.0 ruby-devel as a component of SUSE CaaS Platform 4.0 ruby as a component of SUSE Enterprise Storage 7 ruby as a component of SUSE Enterprise Storage 7.1 ruby-devel as a component of SUSE Enterprise Storage 7.1 ruby as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 ruby2.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 ruby as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS ruby-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS ruby as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS ruby-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS ruby as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS ruby-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS ruby as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS ruby-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS ruby as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 ruby-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 ruby as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 ruby-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 ruby as a component of SUSE Linux Enterprise Real Time 15 SP3 ruby-devel as a component of SUSE Linux Enterprise Real Time 15 SP3 ruby as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata ruby as a component of SUSE Linux Enterprise Server 12 SP2-BCL libruby2_1-2_1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL ruby2.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL ruby2.1-stdlib as a component of SUSE Linux Enterprise Server 12 SP2-BCL ruby as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS libruby2_1-2_1 as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS ruby2.1 as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS ruby2.1-stdlib as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS ruby as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libruby2_1-2_1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS ruby2.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS ruby2.1-stdlib as a component of SUSE Linux Enterprise Server 12 SP4-LTSS ruby as a component of SUSE Linux Enterprise Server 12 SP5 libruby2_1-2_1 as a component of SUSE Linux Enterprise Server 12 SP5 ruby2.1 as a component of SUSE Linux Enterprise Server 12 SP5 ruby2.1-stdlib as a component of SUSE Linux Enterprise Server 12 SP5 ruby as a component of SUSE Linux Enterprise Server 15 SP1-LTSS ruby-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS ruby as a component of SUSE Linux Enterprise Server 15 SP2-LTSS ruby-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS ruby as a component of SUSE Linux Enterprise Server 15 SP3-LTSS ruby-devel as a component of SUSE Linux Enterprise Server 15 SP3-LTSS ruby as a component of SUSE Linux Enterprise Server Teradata 12 SP3 ruby2.1 as a component of SUSE Linux Enterprise Server Teradata 12 SP3 ruby as a component of SUSE Linux Enterprise Server Teradata 12 SP3-LTSS ruby2.1 as a component of SUSE Linux Enterprise Server Teradata 12 SP3-LTSS ruby as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libruby2_1-2_1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 ruby2.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 ruby2.1-stdlib as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 ruby as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 ruby2.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 ruby as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 ruby-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 ruby as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 ruby-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 ruby as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 ruby-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 ruby-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 ruby as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 ruby2.1-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 ruby2.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 ruby as a component of SUSE Manager Proxy 4.2 ruby-devel as a component of SUSE Manager Proxy 4.2 ruby as a component of SUSE Manager Retail Branch Server 4.2 ruby-devel as a component of SUSE Manager Retail Branch Server 4.2 ruby as a component of SUSE Manager Server 4.2 ruby-devel as a component of SUSE Manager Server 4.2 ruby as a component of SUSE OpenStack Cloud 9 libruby2_1-2_1 as a component of SUSE OpenStack Cloud 9 ruby2.1 as a component of SUSE OpenStack Cloud 9 ruby2.1-stdlib as a component of SUSE OpenStack Cloud 9 ruby as a component of SUSE OpenStack Cloud Crowbar 9 libruby2_1-2_1 as a component of SUSE OpenStack Cloud Crowbar 9 ruby2.1 as a component of SUSE OpenStack Cloud Crowbar 9 ruby2.1-stdlib as a component of SUSE OpenStack Cloud Crowbar 9 A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1. The URI parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to URI objects. The fixed versions are 0.12.1, 0.11.1, 0.10.2 and 0.10.0.1. CVE-2023-28755 openSUSE Tumbleweed:libruby3_1-3_1-3.1.4-1.1 openSUSE Tumbleweed:libruby3_2-3_2-3.2.2-1.1 openSUSE Tumbleweed:ruby3.1-3.1.4-1.1 openSUSE Tumbleweed:ruby3.1-devel-3.1.4-1.1 openSUSE Tumbleweed:ruby3.1-devel-extra-3.1.4-1.1 openSUSE Tumbleweed:ruby3.1-doc-3.1.4-1.1 openSUSE Tumbleweed:ruby3.1-doc-ri-3.1.4-1.1 openSUSE Tumbleweed:ruby3.2-3.2.2-1.1 openSUSE Tumbleweed:ruby3.2-devel-3.2.2-1.1 openSUSE Tumbleweed:ruby3.2-devel-extra-3.2.2-1.1 openSUSE Tumbleweed:ruby3.2-doc-3.2.2-1.1 openSUSE Tumbleweed:ruby3.2-doc-ri-3.2.2-1.1 SUSE CaaS Platform 4.0:ruby SUSE CaaS Platform 4.0:ruby-devel SUSE Enterprise Storage 7.1:ruby SUSE Enterprise Storage 7.1:ruby-devel SUSE Enterprise Storage 7:ruby SUSE Linux Enterprise High Performance Computing 12 SP5:ruby SUSE Linux Enterprise High Performance Computing 12 SP5:ruby2.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:ruby SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:ruby-devel SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:ruby SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:ruby-devel SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:ruby SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:ruby-devel SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:ruby SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:ruby-devel SUSE Linux Enterprise Module for Basesystem 15 SP4:ruby SUSE Linux Enterprise Module for Basesystem 15 SP4:ruby-devel SUSE Linux Enterprise Module for Basesystem 15 SP5:ruby SUSE Linux Enterprise Module for Basesystem 15 SP5:ruby-devel SUSE Linux Enterprise Real Time 15 SP3:ruby SUSE Linux Enterprise Real Time 15 SP3:ruby-devel SUSE Linux Enterprise Server 11 SP3 for Teradata:ruby SUSE Linux Enterprise Server 12 SP2-BCL:libruby2_1-2_1 SUSE Linux Enterprise Server 12 SP2-BCL:ruby SUSE Linux Enterprise Server 12 SP2-BCL:ruby2.1 SUSE Linux Enterprise Server 12 SP2-BCL:ruby2.1-stdlib SUSE Linux Enterprise Server 12 SP4-ESPOS:libruby2_1-2_1 SUSE Linux Enterprise Server 12 SP4-ESPOS:ruby SUSE Linux Enterprise Server 12 SP4-ESPOS:ruby2.1 SUSE Linux Enterprise Server 12 SP4-ESPOS:ruby2.1-stdlib SUSE Linux Enterprise Server 12 SP4-LTSS:libruby2_1-2_1 SUSE Linux Enterprise Server 12 SP4-LTSS:ruby SUSE Linux Enterprise Server 12 SP4-LTSS:ruby2.1 SUSE Linux Enterprise Server 12 SP4-LTSS:ruby2.1-stdlib SUSE Linux Enterprise Server 12 SP5:libruby2_1-2_1 SUSE Linux Enterprise Server 12 SP5:ruby SUSE Linux Enterprise Server 12 SP5:ruby2.1 SUSE Linux Enterprise Server 12 SP5:ruby2.1-stdlib SUSE Linux Enterprise Server 15 SP1-LTSS:ruby SUSE Linux Enterprise Server 15 SP1-LTSS:ruby-devel SUSE Linux Enterprise Server 15 SP2-LTSS:ruby SUSE Linux Enterprise Server 15 SP2-LTSS:ruby-devel SUSE Linux Enterprise Server 15 SP3-LTSS:ruby SUSE Linux Enterprise Server 15 SP3-LTSS:ruby-devel SUSE Linux Enterprise Server Teradata 12 SP3-LTSS:ruby SUSE Linux Enterprise Server Teradata 12 SP3-LTSS:ruby2.1 SUSE Linux Enterprise Server Teradata 12 SP3:ruby SUSE Linux Enterprise Server Teradata 12 SP3:ruby2.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libruby2_1-2_1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:ruby SUSE Linux Enterprise Server for SAP Applications 12 SP4:ruby2.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:ruby2.1-stdlib SUSE Linux Enterprise Server for SAP Applications 12 SP5:ruby SUSE Linux Enterprise Server for SAP Applications 12 SP5:ruby2.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:ruby SUSE Linux Enterprise Server for SAP Applications 15 SP1:ruby-devel SUSE Linux Enterprise Server for SAP Applications 15 SP2:ruby SUSE Linux Enterprise Server for SAP Applications 15 SP2:ruby-devel SUSE Linux Enterprise Server for SAP Applications 15 SP3:ruby SUSE Linux Enterprise Server for SAP Applications 15 SP3:ruby-devel SUSE Linux Enterprise Software Development Kit 12 SP5:ruby SUSE Linux Enterprise Software Development Kit 12 SP5:ruby-devel SUSE Linux Enterprise Software Development Kit 12 SP5:ruby2.1 SUSE Linux Enterprise Software Development Kit 12 SP5:ruby2.1-devel SUSE Manager Proxy 4.2:ruby SUSE Manager Proxy 4.2:ruby-devel SUSE Manager Retail Branch Server 4.2:ruby SUSE Manager Retail Branch Server 4.2:ruby-devel SUSE Manager Server 4.2:ruby SUSE Manager Server 4.2:ruby-devel SUSE OpenStack Cloud 9:libruby2_1-2_1 SUSE OpenStack Cloud 9:ruby SUSE OpenStack Cloud 9:ruby2.1 SUSE OpenStack Cloud 9:ruby2.1-stdlib SUSE OpenStack Cloud Crowbar 9:libruby2_1-2_1 SUSE OpenStack Cloud Crowbar 9:ruby SUSE OpenStack Cloud Crowbar 9:ruby2.1 SUSE OpenStack Cloud Crowbar 9:ruby2.1-stdlib moderate 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L