There is a denial of service vulnerability in the header parsing component of Rack.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade pcsUpgrade pcs-snmp | May 15, 2023 | May 9, 2023 |
| Amazon Linux Ami 2 | — | Upgrade pcsUpgrade pcs-snmpUpgrade pcs-debuginfo | May 3, 2023 | May 3, 2023 |
| Centos_linux | — | Upgrade pcs-snmpUpgrade rubygem-fast_gettextUpgrade rubygem-ffi-debuginfoUpgrade rubygem-version_gemUpgrade rubygem-loggingUpgrade rubygem-hammer_cliUpgrade rubygem-gssapiUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-unicode-debuginfoUpgrade rubygem-mime-typesUpgrade rubygem-localeUpgrade rubygem-apipie-bindingsUpgrade rubygem-http-cookieUpgrade rubygem-domain_nameUpgrade rubygem-hammer_cli_foreman_googleUpgrade python39-pulp_manifestUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-jwtUpgrade rubygem-multi_jsonUpgrade rubygem-unicodeUpgrade rubygem-little-pluggerUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-http-acceptUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-snaky_hashUpgrade rubygem-unf_extUpgrade rubygem-amazing_printUpgrade rubygem-ffi-debugsourceUpgrade rubygem-unicode-debugsourceUpgrade foreman-cliUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-rest-clientUpgrade rubygem-hashieUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-ffiUpgrade rubygem-netrcUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-mime-types-dataUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-powerbarUpgrade rubygem-unicode-display_widthUpgrade rubygem-highlineUpgrade rubygem-hammer_cli_foreman_tasksUpgrade pcsUpgrade satellite-cloneUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-unfUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-clampUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-foreman_maintainUpgrade rubygem-oauth-ttyUpgrade satellite-maintainUpgrade satellite-cli | May 15, 2023 | May 9, 2023 |
| Debian | — | Upgrade ruby-rack | Apr 20, 2023 | Apr 20, 2023 |
| Freebsd | — | Upgrade rubygem-rack16Upgrade rubygem-rack22Upgrade rubygem-rack | Mar 24, 2023 | Mar 24, 2023 |
| Oracle_linux | — | Upgrade pcsUpgrade pcs-snmp | May 30, 2023 | Mar 15, 2023 |
| Redhat_linux | — | Upgrade pcs-snmpUpgrade pcs | Apr 26, 2023 | Apr 25, 2023 |
| Rocky_linux | — | Upgrade pcs-snmpUpgrade libdb-debugsourceUpgrade libdb-debuginfoUpgrade libdb-sql-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libdb-cxxUpgrade pcsUpgrade libdb-cxx-debuginfoUpgrade libdb-utils-debuginfo | Mar 5, 2024 | Nov 11, 2023 |
| Suse | — | Upgrade ruby2.5-rubygem-rack-docUpgrade ruby2.5-rubygem-rack-testsuiteUpgrade ruby2.5-rubygem-rack | Mar 30, 2023 | Mar 29, 2023 |
| Ubuntu | — | Upgrade ruby-rackUpgrade ruby-rack (Ubuntu Pro) | Mar 13, 2024 | Mar 12, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub