A DoS vulnerability exists in Rack <v3.0.4.2, <v2.2.6.3, <v2.1.4.3 and <v2.0.9.3 within in the Multipart MIME parsing code in which could allow an attacker to craft requests that can be abuse to cause multipart parsing to take longer than expected.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade pcs-snmpUpgrade pcs | May 15, 2023 | Mar 10, 2023 |
| Centos_linux | — | Upgrade pcs-snmpUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-http-acceptUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade satellite-cliUpgrade rubygem-jwtUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-ffi-debuginfoUpgrade satellite-maintainUpgrade rubygem-netrcUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-ffi-debugsourceUpgrade rubygem-loggingUpgrade rubygem-ffiUpgrade rubygem-unicode-debugsourceUpgrade rubygem-fast_gettextUpgrade rubygem-version_gemUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-hammer_cli_foreman_tasksUpgrade python39-pulp_manifestUpgrade rubygem-unicode-debuginfoUpgrade rubygem-multi_jsonUpgrade rubygem-powerbarUpgrade rubygem-localeUpgrade rubygem-snaky_hashUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-mime-typesUpgrade rubygem-unicode-display_widthUpgrade rubygem-http-cookieUpgrade rubygem-rest-clientUpgrade rubygem-hashieUpgrade satellite-cloneUpgrade rubygem-mime-types-dataUpgrade rubygem-gssapiUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-hammer_cliUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-highlineUpgrade rubygem-little-pluggerUpgrade rubygem-domain_nameUpgrade rubygem-apipie-bindingsUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-foreman_maintainUpgrade rubygem-clampUpgrade rubygem-unfUpgrade rubygem-oauth-ttyUpgrade rubygem-hammer_cli_foreman_adminUpgrade foreman-cliUpgrade rubygem-unf_ext-debugsourceUpgrade pcsUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-amazing_printUpgrade rubygem-unicode | May 15, 2023 | Mar 10, 2023 |
| Debian | — | Upgrade ruby-rack | Apr 20, 2023 | Mar 10, 2023 |
| Freebsd | — | Upgrade rubygem-rackUpgrade rubygem-rack22Upgrade rubygem-rack16 | Mar 7, 2023 | Mar 6, 2023 |
| Oracle_linux | — | Upgrade pcsUpgrade pcs-snmp | May 30, 2023 | Mar 8, 2023 |
| Redhat_linux | — | Upgrade pcs-snmpNo solution existsUpgrade pcs | Apr 26, 2023 | Mar 10, 2023 |
| Rocky_linux | — | Upgrade libdb-cxxUpgrade libdb-cxx-debuginfoUpgrade libdb-utils-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade pcsUpgrade libdb-debugsourceUpgrade libdb-debuginfoUpgrade pcs-snmpUpgrade libdb-sql-debuginfo | Mar 5, 2024 | Mar 10, 2023 |
| Suse | — | Upgrade ruby2.5-rubygem-rackUpgrade ruby2.5-rubygem-rack-testsuiteUpgrade ruby2.5-rubygem-rack-docUpgrade rmt-server-pubcloudUpgrade rmt-server-configUpgrade rmt-server | Mar 15, 2023 | Mar 10, 2023 |
| Ubuntu | — | Upgrade ruby-rack (Ubuntu Pro)Upgrade ruby-rack | Jun 21, 2024 | Mar 10, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub