The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
multipart/parser.rb in Rack 1.3.x before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to cause a denial of service (memory consumption and out-of-memory error) via a long string in a Multipart HTTP packet.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ruby-rack | Jul 30, 2024 | Mar 1, 2013 |
| Gentoo Linux | — | Upgrade dev-ruby/rack. | Oct 30, 2017 | Mar 1, 2013 |
| Suse | — | Upgrade rubygem-activesupport-3_2-docUpgrade rubygem-rack-1_1Upgrade rubygem-railties-3_2Upgrade rubygem-activerecord-3_2Upgrade rubygem-railties-3_2-docUpgrade rubygem-rack-1_4-testsuiteUpgrade rubygem-activerecordUpgrade rubygem-rails-2_3Upgrade rubygem-rack-1_4-docUpgrade rubygem-rack-1_1-docUpgrade rubygem-rack-1_3Upgrade rubygem-activerecord-2_3-docUpgrade rubygem-actionmailer-3_2Upgrade rubygem-actionpack-2_3Upgrade rubygem-rack-1_4Upgrade rubygem-activeresource-3_2Upgrade rubygem-activemodel-3_2Upgrade rubygem-activerecord-2_3-testsuiteUpgrade rubygem-rack-1_3-docUpgrade rubygem-activerecord-3_2-docUpgrade rubygem-actionpack-2_3-testsuiteUpgrade rubygem-rails-3_2-docUpgrade rubygem-activemodel-3_2-docUpgrade rubygem-activeresource-2_3-testsuiteUpgrade rubygem-rack-1_2-testsuiteUpgrade rubygem-activeresource-2_3-docUpgrade rubygem-activesupport-2_3-docUpgrade rubygem-actionmailerUpgrade rubygem-actionpackUpgrade rubygem-activeresource-2_3Upgrade rubygem-actionpack-2_3-docUpgrade rubygem-railsUpgrade rubygem-actionmailer-2_3Upgrade rubygem-rails-3_2Upgrade rubygem-rack-1_2Upgrade rubygem-actionpack-3_2-docUpgrade rubygem-activerecord-2_3Upgrade rubygem-actionmailer-3_2-docUpgrade rubygem-activeresourceUpgrade rubygem-actionpack-3_2Upgrade rubygem-rails-2_3-docUpgrade rubygem-actionmailer-2_3-testsuiteUpgrade sle-sdk-releaseUpgrade rubygem-activeresource-3_2-docUpgrade rubygem-activesupport-2_3Upgrade rubygem-activesupportUpgrade rubygem-rack-1_3-testsuiteUpgrade rubygem-rackUpgrade rubygem-activesupport-3_2Upgrade rubygem-actionmailer-2_3-docUpgrade rubygem-rack-1_2-docUpgrade rubygem-rack-1_1-testsuite | Feb 17, 2015 | Mar 1, 2013 |
| Ubuntu | — | Upgrade ruby-rack | Nov 19, 2024 | Mar 1, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub