Fluid Attacks Database

Description

A regular expression based DoS vulnerability in Action Dispatch <6.0.6.1,< 6.1.7.1, and <7.0.4.1. Specially crafted cookies, in combination with a specially crafted X_FORWARDED_HOST header can cause the regular expression engine to enter a state of catastrophic backtracking. This can cause the process to use large amounts of CPU and memory, leading to a possible DoS vulnerability All users running an affected release should either upgrade or use one of the workarounds immediately.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
debian 12	rails	>=0 <2:6.1.7.3+dfsg-1	2:6.1.7.3+dfsg-1
debian 13	rails	>=0 <2:6.1.7.3+dfsg-1	2:6.1.7.3+dfsg-1
rubygems	rails	>=3.0.0 <6.0.6.1 \|\| >=6.1.0 <6.1.7.1 \|\| >=7.0.0 <7.0.4.1	6.0.6.1, 6.1.7.1, 7.0.4.1
debian 14	rails	>=0 <2:6.1.7.3+dfsg-1	2:6.1.7.3+dfsg-1
rubygems	actionpack	>=3.0.0 <5.2.8.15 \|\| >=6.0.0 <6.1.7.1 \|\| >=7.0.0 <7.0.4.1	5.2.8.15, 6.1.7.1, 7.0.4.1

Aliases

1. CVE-2023-227922. NVD-2023-227923. OSV-DEBIAN-2023-227924. OSV-2023-227925. GCVE-2023-227926. SECURITY-TRACKER-CVE-2023-227927. discuss.rubyonrails.org

References

1. https://discuss.rubyonrails.org/t/cve-2023-22792-possible-redos-based-dos-vulnerability-in-action-dispatch/821152. https://github.com/rails/rails/releases/tag/v7.0.4.13. https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2023-22792.yml4. https://rubyonrails.org/2023/1/17/Rails-Versions-6-0-6-1-6-1-7-1-7-0-4-1-have-been-released5. https://security.netapp.com/advisory/ntap-20240202-00076. https://www.debian.org/security/2023/dsa-5372

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.