There is a denial of service vulnerability in the header parsing component of Rack.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade pcsUpgrade pcs-snmp | May 15, 2023 | May 9, 2023 |
| Amazon Linux Ami 2 | — | Upgrade pcs-debuginfoUpgrade pcs-snmpUpgrade pcs | May 3, 2023 | May 3, 2023 |
| Centos_linux | — | Upgrade rubygem-little-pluggerUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-loggingUpgrade rubygem-fast_gettextUpgrade rubygem-version_gemUpgrade pcs-snmpUpgrade rubygem-ffi-debuginfoUpgrade rubygem-hammer_cliUpgrade rubygem-gssapiUpgrade rubygem-unicode-debugsourceUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-snaky_hashUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-unicodeUpgrade rubygem-http-acceptUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-domain_nameUpgrade rubygem-multi_jsonUpgrade rubygem-ffi-debugsourceUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-jwtUpgrade rubygem-unicode-debuginfoUpgrade python39-pulp_manifestUpgrade rubygem-apipie-bindingsUpgrade rubygem-localeUpgrade rubygem-mime-typesUpgrade rubygem-http-cookieUpgrade rubygem-unf_extUpgrade rubygem-amazing_printUpgrade satellite-maintainUpgrade rubygem-unf_ext-debugsourceUpgrade satellite-cloneUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-oauth-ttyUpgrade rubygem-foreman_maintainUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-oauthUpgrade rubygem-unfUpgrade rubygem-ffiUpgrade rubygem-hammer_cli_foreman_templatesUpgrade satellite-cliUpgrade rubygem-hashieUpgrade foreman-cliUpgrade rubygem-clampUpgrade rubygem-unicode-display_widthUpgrade rubygem-highlineUpgrade rubygem-hammer_cli_foreman_tasksUpgrade pcsUpgrade rubygem-netrcUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-mime-types-dataUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-powerbar | May 15, 2023 | May 9, 2023 |
| Debian | — | Upgrade ruby-rack | Apr 20, 2023 | Apr 20, 2023 |
| Freebsd | — | Upgrade rubygem-rackUpgrade rubygem-rack16Upgrade rubygem-rack22 | Mar 24, 2023 | Mar 24, 2023 |
| Oracle_linux | — | Upgrade pcsUpgrade pcs-snmp | May 30, 2023 | Mar 15, 2023 |
| Redhat_linux | — | Upgrade pcsUpgrade pcs-snmp | Apr 26, 2023 | Apr 25, 2023 |
| Rocky_linux | — | Upgrade libdb-sql-debuginfoUpgrade libdb-debugsourceUpgrade pcs-snmpUpgrade libdb-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libdb-utils-debuginfoUpgrade pcsUpgrade libdb-cxx-debuginfoUpgrade libdb-cxx | Mar 5, 2024 | Nov 11, 2023 |
| Suse | — | Upgrade ruby2.5-rubygem-rack-testsuiteUpgrade ruby2.5-rubygem-rackUpgrade ruby2.5-rubygem-rack-doc | Mar 30, 2023 | Mar 29, 2023 |
| Ubuntu | — | Upgrade ruby-rackUpgrade ruby-rack (Ubuntu Pro) | Mar 13, 2024 | Mar 12, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub