There is a denial of service vulnerability in the header parsing component of Rack.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade pcs-snmpUpgrade pcs | May 15, 2023 | May 9, 2023 |
| Amazon Linux Ami 2 | — | Upgrade pcsUpgrade pcs-snmpUpgrade pcs-debuginfo | May 3, 2023 | May 3, 2023 |
| Centos_linux | — | Upgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-amazing_printUpgrade rubygem-gssapiUpgrade rubygem-hammer_cliUpgrade rubygem-fast_gettextUpgrade rubygem-loggingUpgrade rubygem-unicode-debuginfoUpgrade pcs-snmpUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-jwtUpgrade rubygem-ffi-debuginfoUpgrade python39-pulp_manifestUpgrade rubygem-http-acceptUpgrade rubygem-mime-typesUpgrade rubygem-apipie-bindingsUpgrade rubygem-http-cookieUpgrade rubygem-unicodeUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-snaky_hashUpgrade rubygem-multi_jsonUpgrade rubygem-unicode-debugsourceUpgrade rubygem-domain_nameUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-localeUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-ffi-debugsourceUpgrade rubygem-unf_extUpgrade rubygem-version_gemUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-little-pluggerUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade satellite-cliUpgrade rubygem-mime-types-dataUpgrade foreman-cliUpgrade rubygem-hashieUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-clampUpgrade rubygem-powerbarUpgrade rubygem-rest-clientUpgrade rubygem-unf_ext-debuginfoUpgrade satellite-maintainUpgrade rubygem-ffiUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-foreman_maintainUpgrade rubygem-oauth-ttyUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-unicode-display_widthUpgrade rubygem-highlineUpgrade rubygem-hammer_cli_foreman_tasksUpgrade pcsUpgrade rubygem-netrcUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-unf_ext-debugsourceUpgrade satellite-cloneUpgrade rubygem-unfUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_foreman_virt_who_configure | May 15, 2023 | May 9, 2023 |
| Debian | — | Upgrade ruby-rack | Apr 20, 2023 | Apr 20, 2023 |
| Freebsd | — | Upgrade rubygem-rack22Upgrade rubygem-rack16Upgrade rubygem-rack | Mar 24, 2023 | Mar 24, 2023 |
| Oracle_linux | — | Upgrade pcs-snmpUpgrade pcs | May 30, 2023 | Mar 15, 2023 |
| Redhat_linux | — | Upgrade pcs-snmpUpgrade pcs | Apr 26, 2023 | Apr 25, 2023 |
| Rocky_linux | — | Upgrade pcsUpgrade libdb-utils-debuginfoUpgrade libdb-cxx-debuginfoUpgrade libdb-cxxUpgrade pcs-snmpUpgrade libdb-sql-devel-debuginfoUpgrade libdb-sql-debuginfoUpgrade libdb-debugsourceUpgrade libdb-debuginfo | Mar 5, 2024 | Nov 11, 2023 |
| Suse | — | Upgrade ruby2.5-rubygem-rack-docUpgrade ruby2.5-rubygem-rack-testsuiteUpgrade ruby2.5-rubygem-rack | Mar 30, 2023 | Mar 29, 2023 |
| Ubuntu | — | Upgrade ruby-rackUpgrade ruby-rack (Ubuntu Pro) | Mar 13, 2024 | Mar 12, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub