CVE:CVE-2021-41817
CNNVD:CNNVD-202111-1460
Ruby是松本行弘个人开发者的一种跨平台、面向对象的动态类型编程语言。
Ruby Date Gem 中存在安全漏洞，该漏洞源于产品的日期解析方法实现存在错误。攻击者可通过该漏洞导致拒绝服务。以下产品及版本受到影响：Ruby Date Gem 2.0.0 版本及之前版本、Ruby Date Gem 3.0.1 版本及之前版本、Ruby Date Gem 3.1.1 版本及之前版本、Ruby Date Gem 3.2.0 版本及之前版本。
solution:Upgrade ruby-lang date to a higher version than 2.0.1,3.0.2,3.1.2,3.2.0,and avoid the version (,2.0.1),[3.0.0,3.0.2),[3.1.0,3.1.2),3.2.0; Upgrade ruby-lang ruby to a higher version than 2.6.9,2.7.5,3.0.3,and avoid the version [2.6.0,2.6.9),[2.7.0,2.7.5),[3.0.0,3.0.3); Upgrade redhat software_collections to a higher version than -; Upgrade redhat enterprise_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade fedoraproject fedora to a higher version than 34,35,and avoid the version 34,35; Upgrade debian debian_linux to a higher version than 9.0,10.0,11.0,and avoid the version 9.0,10.0,11.0; Upgrade suse linux_enterprise to a higher version than 12.0,15.0,and avoid the version 12.0,15.0; Upgrade opensuse factory to a higher version than -; Upgrade opensuse leap to a higher version than 15.2,and avoid the version 15.2