A denial of service vulnerability in the Range header parsing component of Rack >= 1.5.0. A Carefully crafted input can cause the Range header parsing component in Rack to take an unexpected amount of time, possibly resulting in a denial of service attack vector. Any applications that deal with Range requests (such as streaming applications, or applications that serve files) may be impacted.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade rubygem-clampUpgrade rubygem-foreman_maintainUpgrade rubygem-mime-types-dataUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-unfUpgrade rubygem-hashieUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hammer_cliUpgrade satellite-cloneUpgrade rubygem-amazing_printUpgrade rubygem-oauthUpgrade foreman-cliUpgrade rubygem-ffi-debuginfoUpgrade rubygem-highlineUpgrade rubygem-gssapiUpgrade rubygem-rest-clientUpgrade rubygem-http-cookieUpgrade rubygem-version_gemUpgrade rubygem-oauth-ttyUpgrade rubygem-little-pluggerUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-jwtUpgrade rubygem-hammer_cli_katelloUpgrade satellite-cliUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-snaky_hashUpgrade rubygem-hammer_cli_foreman_openscapUpgrade satellite-maintainUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-mime-typesUpgrade rubygem-netrcUpgrade rubygem-unicode-display_widthUpgrade rubygem-unicode-debuginfoUpgrade python39-pulp_manifestUpgrade rubygem-fast_gettextUpgrade rubygem-loggingUpgrade rubygem-http-acceptUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-powerbarUpgrade rubygem-unicode-debugsourceUpgrade rubygem-unicodeUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-ffi-debugsourceUpgrade rubygem-localeUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-domain_nameUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-ffiUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-apipie-bindingsUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-unf_ext-debuginfo | Nov 13, 2023 | Feb 9, 2023 |
| Debian | — | Upgrade ruby-rack | Feb 1, 2023 | Feb 1, 2023 |
| Freebsd | — | Upgrade rubygem-rackUpgrade rubygem-rack22Upgrade rubygem-rack16 | Jan 20, 2023 | Jan 19, 2023 |
| Redhat_linux | — | Upgrade rubygem-jwtUpgrade rubygem-little-pluggerUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-unicode-debugsourceUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-snaky_hashUpgrade rubygem-powerbarUpgrade satellite-cloneUpgrade rubygem-unicode-display_widthUpgrade rubygem-unicodeUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-mime-types-dataUpgrade rubygem-oauthUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-ffiUpgrade rubygem-apipie-bindingsUpgrade rubygem-multi_jsonUpgrade rubygem-oauth-ttyUpgrade rubygem-amazing_printUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-domain_nameUpgrade rubygem-gssapiUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-unfUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-unicode-debuginfoUpgrade rubygem-mime-typesUpgrade rubygem-ffi-debugsourceUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cliUpgrade satellite-cliUpgrade rubygem-localeUpgrade rubygem-ffi-debuginfoUpgrade rubygem-http-acceptUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-highlineUpgrade rubygem-rest-clientUpgrade rubygem-version_gemUpgrade rubygem-netrcUpgrade rubygem-fast_gettextUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-hammer_cli_foreman_templatesUpgrade satellite-maintainUpgrade rubygem-foreman_maintainUpgrade python39-pulp_manifestUpgrade rubygem-loggingUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hashieUpgrade rubygem-clampUpgrade foreman-cli | Nov 13, 2023 | Feb 9, 2023 |
| Rocky_linux | — | Upgrade libdb-cxxUpgrade libdb-debuginfoUpgrade libdb-sql-debuginfoUpgrade libdb-debugsourceUpgrade libdb-utils-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libdb-cxx-debuginfo | Mar 5, 2024 | Feb 9, 2023 |
| Suse | — | Upgrade ruby2.5-rubygem-rack-docUpgrade ruby2.5-rubygem-rack-testsuiteUpgrade ruby2.5-rubygem-rack | Feb 7, 2023 | Feb 7, 2023 |
| Ubuntu | — | Upgrade ruby-rack (Ubuntu Pro)Upgrade ruby-rack | Mar 22, 2023 | Feb 9, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub