Astra Linux - уязвимость в ruby-rack

🗓️ 03 May 2026 23:59:50Reported by AstraLinuxType

Rack DoS in Astra Linux from crafted Accept and Forwarded headers; fixes in Rack 2.0.9.4, 2.1.4.4, 2.2.8.1, 3.0.9.1.

Reporter	Title	Published	Views	Family All 171
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in rack-2.0.7.gem	15 Apr 202503:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in rack-2.0.7.gem	29 Apr 202416:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data is vulnerable to denial of service due to Rack ( CVE-2024-26146 )	8 Aug 202420:07	–	ibm
Tenable Nessus	Amazon Linux 2 : pcs (ALAS-2024-2492)	18 Mar 202400:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0132: pcs (ALINUX3-SA-2024:0132)	14 May 202500:00	–	nessus
Tenable Nessus	CentOS 8 : pcs (CESA-2024:2953)	22 May 202400:00	–	nessus
Tenable Nessus	Debian dla-3800 : ruby-rack - security update	29 Apr 202400:00	–	nessus
Tenable Nessus	Debian dsa-5698 : ruby-rack - security update	24 May 202400:00	–	nessus
Tenable Nessus	Fedora 43 : rubygem-actioncable / rubygem-actionmailbox / rubygem-actionmailer / etc (2025-203b7db566)	16 Jul 202500:00	–	nessus
Tenable Nessus	Fedora 41 : rubygem-rack (2025-a35addbf9b)	12 Nov 202500:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Astra Linux	1.7	x86-64	ruby-rack	0:2.0.6-3+deb10u4	ruby-rack_0:2.0.6-3+deb10u4_x86-64.deb

Source	Link
bdu	www.bdu.fstec.ru/vul/2024-01716
cve	www.cve.org/CVERecord

03 May 2026 23:59Current

6.8Medium risk

Vulners AI Score6.8

CVSS 35.3

CVSS 3.15.3 - 7.5

EPSS0.00775

SSVC