Lucene search
Gentoo FoundationMGASA-2022-0252HistoryJul 05, 2022 - 10:11 p.m.
Updated ruby-rack packages fix security vulnerability
2022-07-0522:11:26
Gentoo Foundation
advisories.mageia.org
18
10 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
0.005 Low
EPSS
Percentile
75.5%
Crafted multipart POST request may cause a DoS (CVE-2022-30122) Crafted requests can cause shell escape sequences (CVE-2022-30123)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 8 | noarch | ruby-rack | < 2.2.3.1-1 | ruby-rack-2.2.3.1-1.mga8 |
Related
debian
debian
[SECURITY] [DLA 3095-1] ruby-rack security update
2022-09-03 20:51:48
[SECURITY] [DSA 5530-1] ruby-rack security update
2023-10-22 12:35:21
nessus
nessus
Amazon Linux 2 : pcs (ALAS-2022-1895)
2022-12-07 00:00:00
GLSA-202310-18 : Rack: Multiple Vulnerabilities
2023-10-30 00:00:00
SUSE SLES15 Security Update : rubygem-rack (SUSE-SU-2022:2192-1)
2022-06-28 00:00:00
redos
redos
ROS-20220706-02
2022-07-06 00:00:00
ubuntu
ubuntu
Rack vulnerabilities
2023-02-27 00:00:00
Rack vulnerabilities
2022-12-13 00:00:00
osv
osv
ruby-rack - security update
2022-09-04 00:00:00
ruby-rack vulnerabilities
2023-02-27 18:25:06
ruby-rack vulnerabilities
2022-12-13 11:33:52
amazon
amazon
Important: pcs
2022-12-01 20:31:00
openvas
openvas
Ubuntu: Security Advisory (USN-5896-1)
2023-02-28 00:00:00
openSUSE: Security Advisory for rubygem-rack (SUSE-SU-2022:2192-1)
2022-06-28 00:00:00
Mageia: Security Advisory (MGASA-2022-0252)
2022-07-06 00:00:00
suse
suse
Security update for rubygem-rack (critical)
2022-06-27 00:00:00
gentoo
gentoo
Rack: Multiple Vulnerabilities
2023-10-30 00:00:00
redhatcve
redhatcve
CVE-2022-30122
2022-06-21 08:00:04
CVE-2022-30123
2022-06-21 08:00:05
nvd
nvd
CVE-2022-30122
2022-12-05 22:15:10
CVE-2022-30123
2022-12-05 22:15:10
hackerone
hackerone
Ruby on Rails: Escape Sequence Injection vulnerability in Rack
2021-11-29 12:44:26
Ruby on Rails: ReDoS in Rack::Multipart
2022-02-22 22:34:07
github
github
Possible shell escape sequence injection vulnerability in Rack
2022-05-27 16:36:51
Denial of Service Vulnerability in Rack Multipart Parsing
2022-05-27 16:36:52
redhat
redhat
(RHSA-2023:1486) Important: Red Hat Gluster Storage web-admin-build security update
2023-03-28 00:06:18
(RHSA-2022:7242) Important: Satellite 6.11.4 Async Security Update
2022-10-27 12:55:31
(RHSA-2022:7343) Important: pcs security update
2022-11-02 16:05:00
debiancve
debiancve
CVE-2022-30122
2022-12-05 22:15:10
CVE-2022-30123
2022-12-05 22:15:10
ubuntucve
ubuntucve
CVE-2022-30122
2022-12-05 00:00:00
CVE-2022-30123
2022-12-05 00:00:00
veracode
veracode
OS Command Injection
2022-05-30 06:53:55
Regular Expression Denial Of Service (ReDoS)
2022-05-30 02:27:40
cvelist
cvelist
CVE-2022-30123
2022-12-05 00:00:00
CVE-2022-30122
2022-12-05 00:00:00
cve
cve
CVE-2022-30123
2022-12-05 22:15:10
CVE-2022-30122
2022-12-05 22:15:10
prion
prion
Denial of service
2022-12-05 22:15:00
Design/Logic Flaw
2022-12-05 22:15:00
rubygems
rubygems
Denial of Service Vulnerability in Rack Multipart Parsing
2022-06-26 21:00:00
Possible shell escape sequence injection vulnerability in Rack
2022-06-26 21:00:00
oraclelinux
oraclelinux
pcs security update
2022-11-03 00:00:00
10 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
0.005 Low
EPSS
Percentile
75.5%
Related for MGASA-2022-0252