There is a denial of service vulnerability in the header parsing component of Rack.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade pcs-snmpUpgrade pcs | May 15, 2023 | May 9, 2023 |
| Amazon Linux Ami 2 | — | Upgrade pcs-debuginfoUpgrade pcs-snmpUpgrade pcs | May 3, 2023 | May 3, 2023 |
| Centos_linux | — | Upgrade pcs-snmpUpgrade rubygem-fast_gettextUpgrade rubygem-gssapiUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cliUpgrade rubygem-loggingUpgrade python39-pulp_manifestUpgrade rubygem-version_gemUpgrade rubygem-ffi-debuginfoUpgrade rubygem-unicodeUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-http-acceptUpgrade rubygem-apipie-bindingsUpgrade rubygem-unicode-debuginfoUpgrade rubygem-localeUpgrade rubygem-http-cookieUpgrade rubygem-ffi-debugsourceUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-mime-typesUpgrade rubygem-domain_nameUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-little-pluggerUpgrade rubygem-unicode-debugsourceUpgrade rubygem-unf_extUpgrade rubygem-jwtUpgrade rubygem-snaky_hashUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-amazing_printUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-unicode-display_widthUpgrade foreman-cliUpgrade satellite-cliUpgrade pcsUpgrade rubygem-hashieUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-ffiUpgrade rubygem-highlineUpgrade rubygem-netrcUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-foreman_maintainUpgrade rubygem-rest-clientUpgrade rubygem-oauth-ttyUpgrade rubygem-mime-types-dataUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-powerbarUpgrade satellite-maintainUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-unfUpgrade rubygem-oauthUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-clampUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade satellite-clone | May 15, 2023 | May 9, 2023 |
| Debian | — | Upgrade ruby-rack | Apr 20, 2023 | Apr 20, 2023 |
| Freebsd | — | Upgrade rubygem-rackUpgrade rubygem-rack16Upgrade rubygem-rack22 | Mar 24, 2023 | Mar 24, 2023 |
| Oracle_linux | — | Upgrade pcs-snmpUpgrade pcs | May 30, 2023 | Mar 15, 2023 |
| Redhat_linux | — | Upgrade pcsUpgrade pcs-snmp | Apr 26, 2023 | Apr 25, 2023 |
| Rocky_linux | — | Upgrade pcsUpgrade libdb-utils-debuginfoUpgrade libdb-cxxUpgrade libdb-cxx-debuginfoUpgrade libdb-debuginfoUpgrade pcs-snmpUpgrade libdb-sql-devel-debuginfoUpgrade libdb-sql-debuginfoUpgrade libdb-debugsource | Mar 5, 2024 | Nov 11, 2023 |
| Suse | — | Upgrade ruby2.5-rubygem-rack-docUpgrade ruby2.5-rubygem-rack-testsuiteUpgrade ruby2.5-rubygem-rack | Mar 30, 2023 | Mar 29, 2023 |
| Ubuntu | — | Upgrade ruby-rackUpgrade ruby-rack (Ubuntu Pro) | Mar 13, 2024 | Mar 12, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub