Improper resource allocation In rack
Description
Rack is a modular Ruby web server interface. Carefully crafted Range headers can cause a server to respond with an unexpectedly large response. Responding with such large responses could lead to a denial of service issue. Vulnerable applications will use the Rack::File middleware or the Rack::Utils.byte_ranges methods (this includes Rails applications). The vulnerability is fixed in 3.0.9.1 and 2.2.8.1.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 rubygems | 3.0.9.1, 2.2.8.1 | ||
 debian 11 | 2.1.4-3+deb11u2 | ||
debian 12 | 2.2.6.4-1+deb12u1 | ||
debian 13 | 2.2.7-1.1 | ||
debian 14 | 2.2.7-1.1 | ||
 rpm rhel8 | 0:0.10.18-2.el8_10 | ||
rpm rhel9 | 0:0.11.7-2.el9_4 | ||
rpm rhel7 | - | - | |
rpm rhel8.8 | 0:0.10.15-4.el8_8.2 | ||
rpm rhel8.6 | 0:0.10.12-6.el8_6.5 |
1-10 of 12
10
Aliases
1. 2. 3. 4. 5. 6. 7.
References
1. 2. 3. 4. 5.