actionpack is vulnerable to denial of service via a crafted HTTP Accept header
actionpack/lib/action_dispatch/http/mime_type.rb in Action Pack in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 does not properly restrict use of the MIME type cache, which allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP Accept header.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2016-0751US | high7.5 | — | ||
actionpack/lib/action_dispatch/http/mime_type.rb in Action Pack in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.… | ||||
02
references
External citations — patches, advisories, analysis.
- http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178043.htmlWEB
- http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178067.htmlWEB
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00053.htmlWEB
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00034.htmlWEB
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00043.htmlWEB
- http://rhn.redhat.com/errata/RHSA-2016-0296.htmlWEB
- http://www.debian.org/security/2016/dsa-3464WEB
- http://www.openwall.com/lists/oss-security/2016/01/25/9WEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan