Denial Of Service (DoS)

2018-11-0702:07:19

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

41.0%

JSON

rack is vulnerable to denial-of-service (DoS) attacks. The vulnerability exists in the multipart parser of rack where it is possible for a request to cause the multipart parser to cause CPU exhaustion.

CPENameOperatorVersion
rackle2.0.5
mod_xsendfileeq0.12__10.el7ui
mod_xsendfileeq0.12__10.el7
mod_xsendfileeq0.12__10.el7sat
python-daemoneq1.6__5.1.el7
python-daemoneq1.6__5.el7
rubygem-kafo_wizardseq0.0.1__1.el7ui
rubygem-kafo_wizardseq0.0.1__1.el7sat
tfm-rubygem-journald-loggereq2.0.4__1.el7sat
tfm-rubygem-journald-loggereq2.0.3__1.el7sat

Name	Operator	Version
rack	le	2.0.5
mod_xsendfile	eq	0.12__10.el7ui
mod_xsendfile	eq	0.12__10.el7
mod_xsendfile	eq	0.12__10.el7sat
python-daemon	eq	1.6__5.1.el7
python-daemon	eq	1.6__5.el7
rubygem-kafo_wizards	eq	0.0.1__1.el7ui
rubygem-kafo_wizards	eq	0.0.1__1.el7sat
tfm-rubygem-journald-logger	eq	2.0.4__1.el7sat
tfm-rubygem-journald-logger	eq	2.0.3__1.el7sat