Bugzilla – Bug 1172445
VUL-1: CVE-2020-7663: rubygem-websocket-extensions: Denial of Service (DoS) via Regex Backtracking
Last modified: 2024-05-22 14:31:21 UTC
CVE-2020-7663 The websocket-extensions ruby module prior to 0.1.5 allows Denial of Service (DoS) via Regex Backtracking. The extension parser may take quadratic time when parsing a header containing an unclosed string parameter value whose content is a repeating two-byte sequence of a backslash and some other character. This could be abused by an attacker to conduct Regex Denial Of Service (ReDoS) on a single-threaded server by providing a malicious payload with the Sec-WebSocket-Extensions header. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-7663 http://people.canonical.com/~ubuntu-security/cve/2020/CVE-2020-7663.html https://github.com/faye/websocket-extensions-ruby/commit/aa156a439da681361ed6f53f1a8131892418838b http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7663 https://github.com/faye/websocket-extensions-ruby/security/advisories/GHSA-g6wq-qcwm-j5g2 https://blog.jcoglan.com/2020/06/02/redos-vulnerability-in-websocket-extensions https://snyk.io/vuln/SNYK-RUBY-WEBSOCKETEXTENSIONS-570830
Reassigning to coldpool as current bugowner
Submitted for 15/rubygem-websocket-extensions. I believe all fixed.
SUSE-SU-2023:0127-1: An update that fixes one vulnerability is now available. Category: security (moderate) Bug References: 1172445 CVE References: CVE-2020-7663 JIRA References: Sources used: openSUSE Leap 15.4 (src): rubygem-websocket-extensions-0.1.3-150000.3.4.1 SUSE Linux Enterprise High Availability 15-SP4 (src): rubygem-websocket-extensions-0.1.3-150000.3.4.1 SUSE Linux Enterprise High Availability 15-SP3 (src): rubygem-websocket-extensions-0.1.3-150000.3.4.1 SUSE Linux Enterprise High Availability 15-SP2 (src): rubygem-websocket-extensions-0.1.3-150000.3.4.1 SUSE Linux Enterprise High Availability 15-SP1 (src): rubygem-websocket-extensions-0.1.3-150000.3.4.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
All done, closing.