Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-6689-1
HistoryMar 12, 2024 - 12:00 a.m.

Rack vulnerabilities

2024-03-1200:00:00
ubuntu.com
15
ubuntu
rack
denial of service
cve-2023-27539
cve-2024-26141
cve-2024-26146
ruby webserver

5.8 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.5%

JSON

Releases

  • Ubuntu 23.10

Packages

  • ruby-rack - modular Ruby webserver interface

Details

It was discovered that Rack incorrectly parse some headers.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2023-27539, CVE-2024-26141, CVE-2024-26146)

OSVersionArchitecturePackageVersionFilename
Ubuntu23.10noarchruby-rack< 2.2.4-3ubuntu0.1UNKNOWN

Related

osv 18
nessus 39
openvas 9
redhat 16
oraclelinux 4
debian 5
rocky 4
almalinux 4
amazon 2
redos 2
mageia 2
ubuntu 1
veracode 3
freebsd 1
nvd 3
cve 4
ubuntucve 3
redhatcve 3
github 3
hackerone 2
wolfi 2
debiancve 3
prion 2
cvelist 3
cgr 2
ibm 2
rubygems 3
osv
osv
ruby-rack vulnerabilities
2024-03-12 10:22:55
ruby-rack - security update
2024-04-29 00:00:00
ruby-rack - security update
2024-05-24 00:00:00
nessus
nessus
Ubuntu 23.10 : Rack vulnerabilities (USN-6689-1)
2024-03-12 00:00:00
Debian dla-3800 : ruby-rack - security update
2024-04-29 00:00:00
Oracle Linux 9 : pcs (ELSA-2024-2113)
2024-05-06 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-6689-1)
2024-03-13 00:00:00
Debian: Security Advisory (DSA-5698-1)
2024-05-27 00:00:00
Debian: Security Advisory (DLA-3800-1)
2024-04-30 00:00:00
redhat
redhat
(RHSA-2024:2007) Moderate: pcs security update
2024-04-23 16:20:34
(RHSA-2024:2953) Moderate: pcs security update
2024-05-22 06:35:11
(RHSA-2024:1846) Moderate: pcs security update
2024-04-16 15:03:20
oraclelinux
oraclelinux
pcs security update
2024-05-02 00:00:00
pcs security update
2024-05-23 00:00:00
pcs security update
2023-05-29 00:00:00
debian
debian
[SECURITY] [DSA 5698-1] ruby-rack security update
2024-05-24 16:43:43
[SECURITY] [DLA 3800-1] ruby-rack security update
2024-04-29 09:44:25
[SECURITY] [DLA 3392-1] ruby-rack security update
2023-04-17 14:31:02
rocky
rocky
pcs security update
2024-06-14 13:59:33
pcs security and bug fix update
2023-05-18 19:18:23
pcs security and bug fix update
2023-05-25 19:53:02
almalinux
almalinux
Moderate: pcs security update
2024-05-22 00:00:00
Moderate: pcs security update
2024-04-30 00:00:00
Moderate: pcs security and bug fix update
2023-05-16 00:00:00
amazon
amazon
Medium: pcs
2024-03-13 20:26:00
Medium: pcs
2023-04-27 18:36:00
redos
redos
ROS-20240508-01
2024-05-08 00:00:00
ROS-20240403-12
2024-04-03 00:00:00
mageia
mageia
Updated ruby-rack packages fix security vulnerabilities
2024-04-12 23:45:19
Updated ruby-rack fixes a vulnerability and some bugs
2024-02-19 20:35:05
ubuntu
ubuntu
Rack vulnerabilities
2024-06-17 00:00:00
veracode
veracode
Regular Expression Denial Of Service (ReDoS)
2023-03-17 02:16:44
Denial Of Service
2024-02-29 05:37:12
Denial Of Service (DoS)
2024-02-29 06:31:11
freebsd
freebsd
rack -- possible denial of service vulnerability in header parsing
2023-03-13 00:00:00
nvd
nvd
CVE-2024-26146
2024-02-29 00:15:51
CVE-2024-26141
2024-02-29 00:15:51
CVE-2024-39316
2024-07-02 16:15:04
cve
cve
CVE-2024-26146
2024-02-29 00:15:51
CVE-2023-27539
2023-03-15 02:20:20
CVE-2024-26141
2024-02-29 00:15:51
ubuntucve
ubuntucve
CVE-2024-26146
2024-02-29 00:00:00
CVE-2023-27539
2023-03-22 00:00:00
CVE-2024-26141
2024-02-29 00:00:00
redhatcve
redhatcve
CVE-2023-27539
2023-03-19 15:39:04
CVE-2024-26146
2024-02-23 03:02:45
CVE-2024-26141
2024-02-23 03:02:28
github
github
Possible Denial of Service Vulnerability in Rack's header parsing
2023-03-15 21:36:02
Rack Header Parsing leads to Possible Denial of Service Vulnerability
2024-02-28 22:57:03
Rack has possible DoS Vulnerability with Range Header
2024-02-28 22:57:12
hackerone
hackerone
Internet Bug Bounty: [CVE-2023-27539] Possible Denial of Service Vulnerability in Rack’s header parsing
2023-07-17 04:55:55
Internet Bug Bounty: [CVE-2024-26146] Header Parsing leads to Possible Denial of Service Vulnerability
2024-04-03 21:28:53
wolfi
wolfi
CVE-2024-26146 vulnerabilities
2024-07-03 09:08:38
CVE-2024-26141 vulnerabilities
2024-07-03 09:08:38
debiancve
debiancve
CVE-2023-27539
2023-03-15 02:20:20
CVE-2024-26146
2024-02-29 00:15:51
CVE-2024-26141
2024-02-29 00:15:51
prion
prion
Design/Logic Flaw
2024-02-29 00:15:00
Design/Logic Flaw
2024-02-29 00:15:00
cvelist
cvelist
CVE-2024-26141 Possible DoS Vulnerability with Range Header in Rack
2024-02-28 23:28:10
CVE-2024-26146 Possible Denial of Service Vulnerability in Rack Header Parsing
2024-02-28 23:28:01
CVE-2024-39316 Rack ReDoS Vulnerability in HTTP Accept Headers Parsing
2024-07-02 15:57:39
cgr
cgr
CVE-2024-26146 vulnerabilities
2024-05-19 03:07:16
CVE-2024-26141 vulnerabilities
2024-05-19 03:07:16
ibm
ibm
Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in rack-2.0.7.gem
2024-04-29 16:12:06
Security Bulletin: Multiple Vulnerabilities in IBM Cloud Pak for Multicloud Management
2024-02-28 21:45:52
rubygems
rubygems
Possible Denial of Service Vulnerability in Rack Header Parsing
2024-02-20 21:00:00
Possible Denial of Service Vulnerability in Rack’s header parsing
2023-03-12 21:00:00
Possible DoS Vulnerability with Range Header in Rack
2024-02-20 21:00:00

5.8 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.5%

JSON
Related for USN-6689-1
osv18nessus39openvas9redhat16oraclelinux4debian5rocky4almalinux4amazon2redos2mageia2ubuntu1veracode3freebsd1nvd3cve4ubuntucve3redhatcve3github3hackerone2wolfi2debiancve3prion2cvelist3cgr2ibm2rubygems3