There is a denial of service vulnerability in the header parsing component of Rack.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade pcs-snmpUpgrade pcs | May 15, 2023 | May 9, 2023 |
| Amazon Linux Ami 2 | — | Upgrade pcs-debuginfoUpgrade pcs-snmpUpgrade pcs | May 3, 2023 | May 3, 2023 |
| Centos_linux | — | Upgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-unicode-display_widthUpgrade pcsUpgrade rubygem-highlineUpgrade rubygem-hashieUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-foreman_maintainUpgrade rubygem-oauth-ttyUpgrade rubygem-hammer_cli_foreman_tasksUpgrade foreman-cliUpgrade satellite-cliUpgrade rubygem-mime-types-dataUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-powerbarUpgrade rubygem-netrcUpgrade rubygem-ffiUpgrade satellite-maintainUpgrade rubygem-clampUpgrade rubygem-unfUpgrade rubygem-unf_ext-debuginfoUpgrade satellite-cloneUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-oauthUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-domain_nameUpgrade rubygem-localeUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-mime-typesUpgrade rubygem-unicode-debuginfoUpgrade rubygem-ffi-debuginfoUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-gssapiUpgrade rubygem-little-pluggerUpgrade rubygem-unicodeUpgrade rubygem-http-acceptUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-unicode-debugsourceUpgrade rubygem-snaky_hashUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-fast_gettextUpgrade pcs-snmpUpgrade rubygem-apipie-bindingsUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-ffi-debugsourceUpgrade rubygem-amazing_printUpgrade rubygem-unf_extUpgrade rubygem-version_gemUpgrade rubygem-loggingUpgrade rubygem-jwtUpgrade python39-pulp_manifestUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cli | May 15, 2023 | May 9, 2023 |
| Debian | — | Upgrade ruby-rack | Apr 20, 2023 | Apr 20, 2023 |
| Freebsd | — | Upgrade rubygem-rackUpgrade rubygem-rack22Upgrade rubygem-rack16 | Mar 24, 2023 | Mar 24, 2023 |
| Oracle_linux | — | Upgrade pcsUpgrade pcs-snmp | May 30, 2023 | Mar 15, 2023 |
| Redhat_linux | — | Upgrade pcsUpgrade pcs-snmp | Apr 26, 2023 | Apr 25, 2023 |
| Rocky_linux | — | Upgrade libdb-utils-debuginfoUpgrade libdb-cxxUpgrade pcsUpgrade libdb-cxx-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libdb-debugsourceUpgrade pcs-snmpUpgrade libdb-debuginfoUpgrade libdb-sql-debuginfo | Mar 5, 2024 | Nov 11, 2023 |
| Suse | — | Upgrade ruby2.5-rubygem-rack-docUpgrade ruby2.5-rubygem-rack-testsuiteUpgrade ruby2.5-rubygem-rack | Mar 30, 2023 | Mar 29, 2023 |
| Ubuntu | — | Upgrade ruby-rack (Ubuntu Pro)Upgrade ruby-rack | Mar 13, 2024 | Mar 12, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub