Lucene search
GoogleOSV:USN-6689-1HistoryMar 12, 2024 - 10:22 a.m.
ruby-rack vulnerabilities
2024-03-1210:22:55
Google
osv.dev
6
rack
software
header parsing
vulnerabilities
denial of service
cve-2023-27539
cve-2024-26141
cve-2024-26146
5.8 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
6.7 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
10.3%
It was discovered that Rack incorrectly parse some headers.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2023-27539, CVE-2024-26141, CVE-2024-26146)
Related
nessus
nessus
Ubuntu 23.10 : Rack vulnerabilities (USN-6689-1)
2024-03-12 00:00:00
RHEL 8 : pcs (RHSA-2024:2007)
2024-04-24 00:00:00
RHEL 8 : pcs (RHSA-2024:3431)
2024-05-28 00:00:00
ubuntu
ubuntu
Rack vulnerabilities
2024-03-12 00:00:00
Rack vulnerabilities
2024-06-17 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-6689-1)
2024-03-13 00:00:00
Debian: Security Advisory (DSA-5698-1)
2024-05-27 00:00:00
Debian: Security Advisory (DLA-3800-1)
2024-04-30 00:00:00
osv
osv
ruby-rack - security update
2024-05-24 00:00:00
Moderate: pcs security update
2024-05-22 00:00:00
Moderate: pcs security update
2024-04-30 00:00:00
debian
debian
[SECURITY] [DSA 5698-1] ruby-rack security update
2024-05-24 16:43:43
[SECURITY] [DLA 3800-1] ruby-rack security update
2024-04-29 09:44:25
[SECURITY] [DLA 3392-1] ruby-rack security update
2023-04-17 13:57:17
oraclelinux
oraclelinux
pcs security update
2024-05-02 00:00:00
pcs security update
2024-05-23 00:00:00
pcs security update
2023-05-29 00:00:00
redhat
redhat
(RHSA-2024:2953) Moderate: pcs security update
2024-05-22 06:35:11
(RHSA-2024:1846) Moderate: pcs security update
2024-04-16 15:03:20
(RHSA-2024:2113) Moderate: pcs security update
2024-04-30 06:14:46
rocky
rocky
pcs security update
2024-06-14 13:59:33
pcs security and bug fix update
2023-05-18 19:18:23
pcs security and bug fix update
2023-05-25 19:53:02
amazon
amazon
Medium: pcs
2024-03-13 20:26:00
Medium: pcs
2023-04-27 18:36:00
redos
redos
ROS-20240508-01
2024-05-08 00:00:00
ROS-20240403-12
2024-04-03 00:00:00
almalinux
almalinux
Moderate: pcs security update
2024-04-30 00:00:00
Moderate: pcs security update
2024-05-22 00:00:00
Moderate: pcs security and bug fix update
2023-05-16 00:00:00
mageia
mageia
Updated ruby-rack packages fix security vulnerabilities
2024-04-12 23:45:19
Updated ruby-rack fixes a vulnerability and some bugs
2024-02-19 20:35:05
veracode
veracode
Regular Expression Denial Of Service (ReDoS)
2023-03-17 02:16:44
Denial Of Service
2024-02-29 05:37:12
Denial Of Service (DoS)
2024-02-29 06:31:11
freebsd
freebsd
rack -- possible denial of service vulnerability in header parsing
2023-03-13 00:00:00
nvd
nvd
cve
cve
github
github
Possible Denial of Service Vulnerability in Rack's header parsing
2023-03-15 21:36:02
Rack Header Parsing leads to Possible Denial of Service Vulnerability
2024-02-28 22:57:03
Rack has possible DoS Vulnerability with Range Header
2024-02-28 22:57:12
redhatcve
redhatcve
hackerone
hackerone
ubuntucve
ubuntucve
wolfi
wolfi
CVE-2024-26146 vulnerabilities
2024-07-05 21:08:40
CVE-2024-26141 vulnerabilities
2024-07-05 21:08:40
prion
prion
Design/Logic Flaw
2024-02-29 00:15:00
Design/Logic Flaw
2024-02-29 00:15:00
debiancve
debiancve
cvelist
cvelist
CVE-2024-26141 Possible DoS Vulnerability with Range Header in Rack
2024-02-28 23:28:10
CVE-2024-39316 Rack ReDoS Vulnerability in HTTP Accept Headers Parsing
2024-07-02 15:57:39
ibm
ibm
cgr
cgr
CVE-2024-26146 vulnerabilities
2024-05-19 03:07:16
CVE-2024-26141 vulnerabilities
2024-05-19 03:07:16
rubygems
rubygems
Possible Denial of Service Vulnerability in Rack Header Parsing
2024-02-20 21:00:00
Possible Denial of Service Vulnerability in Rack’s header parsing
2023-03-12 21:00:00
Possible DoS Vulnerability with Range Header in Rack
2024-02-20 21:00:00
vulnrichment
vulnrichment
CVE-2024-39316 Rack ReDoS Vulnerability in HTTP Accept Headers Parsing
2024-07-02 15:57:39
5.8 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
6.7 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
10.3%
Related for OSV:USN-6689-1