Lucene search
PRIOn knowledge basePRION:CVE-2024-25126HistoryFeb 29, 2024 - 12:15 a.m.
Design/Logic Flaw
2024-02-2900:15:00
PRIOn knowledge base
www.prio-n.com
10
rack
web server
vulnerability
patched
nvd
denial of service
media type parser
redos
Rack is a modular Ruby web server interface. Carefully crafted content type headers can cause Rack’s media type parser to take much longer than expected, leading to a possible denial of service vulnerability (ReDos 2nd degree polynomial). This vulnerability is patched in 3.0.9.1 and 2.2.8.1.
References
discuss.rubyonrails.org/t/denial-of-service-vulnerability-in-rack-content-type-parsing/84941
github.com/rack/rack/commit/6efb2ceea003c4b195815a614e00438cbd543462
github.com/rack/rack/commit/d9c163a443b8cadf4711d84bd2c58cb9ef89cf49
github.com/rack/rack/security/advisories/GHSA-22f2-v57c-j9cx
github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2024-25126.yml
Related
redhatcve
redhatcve
CVE-2024-25126
2024-02-23 03:01:38
cvelist
cvelist
CVE-2024-25126 Rack ReDos in content type parsing (2nd degree polynomial)
2024-02-28 23:28:07
cve
cve
CVE-2024-25126
2024-02-29 00:15:51
debiancve
debiancve
CVE-2024-25126
2024-02-29 00:15:51
osv
osv
Rack vulnerable to ReDoS in content type parsing (2nd degree polynomial)
2024-02-28 22:57:26
CVE-2024-25126
2024-02-29 00:15:51
ruby-rack - security update
2024-04-29 00:00:00
veracode
veracode
Regular Expression Denial Of Service (ReDoS)
2024-02-28 08:16:50
github
github
Rack vulnerable to ReDoS in content type parsing (2nd degree polynomial)
2024-02-28 22:57:26
cgr
cgr
CVE-2024-25126 vulnerabilities
2024-05-19 03:07:16
wolfi
wolfi
CVE-2024-25126 vulnerabilities
2024-07-03 09:08:38
nvd
nvd
CVE-2024-25126
2024-02-29 00:15:51
ubuntucve
ubuntucve
CVE-2024-25126
2024-02-29 00:00:00
hackerone
hackerone
rubygems
rubygems
Denial of Service Vulnerability in Rack Content-Type Parsing
2024-02-20 21:00:00
nessus
nessus
Debian dla-3800 : ruby-rack - security update
2024-04-29 00:00:00
Oracle Linux 9 : pcs (ELSA-2024-2113)
2024-05-06 00:00:00
RHEL 8 : pcs (RHSA-2024:2953)
2024-05-23 00:00:00
redhat
redhat
(RHSA-2024:2007) Moderate: pcs security update
2024-04-23 16:20:34
(RHSA-2024:2113) Moderate: pcs security update
2024-04-30 06:14:46
(RHSA-2024:1846) Moderate: pcs security update
2024-04-16 15:03:20
openvas
openvas
Debian: Security Advisory (DLA-3800-1)
2024-04-30 00:00:00
Mageia: Security Advisory (MGASA-2024-0123)
2024-04-15 00:00:00
Debian: Security Advisory (DSA-5698-1)
2024-05-27 00:00:00
rocky
rocky
pcs security update
2024-06-14 13:59:33
oraclelinux
oraclelinux
pcs security update
2024-05-23 00:00:00
pcs security update
2024-05-02 00:00:00
almalinux
almalinux
Moderate: pcs security update
2024-05-22 00:00:00
Moderate: pcs security update
2024-04-30 00:00:00
amazon
amazon
Medium: pcs
2024-03-13 20:26:00
debian
debian
[SECURITY] [DLA 3800-1] ruby-rack security update
2024-04-29 09:44:25
[SECURITY] [DSA 5698-1] ruby-rack security update
2024-05-24 16:43:43
redos
redos
ROS-20240508-01
2024-05-08 00:00:00
mageia
mageia
Updated ruby-rack packages fix security vulnerabilities
2024-04-12 23:45:19
ubuntu
ubuntu
Rack vulnerabilities
2024-06-17 00:00:00