PostgreSQL Rails Uncontrolled Resource Consumption DoS

🗓️ 20 Jan 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec🔗 bdu.fstec.ru👁 21 Views

Uncontrolled resource consumption in the Rails PostgreSQL adapter can cause service failures.

Reporter	Title	Published	Views	Family All 59
FreeBSD	Rails -- multiple vulnerabilities	10 Feb 202100:00	–	freebsd
attackerkb	CVE-2021-22880	11 Feb 202118:15	–	attackerkb
AstraLinux	Astra Linux – Vulnerability in Rails	14 Sep 202612:01	–	astralinux
Circl	CVE-2021-22880	11 Feb 202120:42	–	circl
CNNVD	Postgresql PostgreSQL Resource Management Error Vulnerability	11 Feb 202100:00	–	cnnvd
CNVD	PostgreSQL Resource Management Error Vulnerability (CNVD-2021-14792)	25 Feb 202100:00	–	cnvd
CVE	CVE-2021-22880	11 Feb 202116:11	–	cve
Cvelist	CVE-2021-22880	11 Feb 202116:11	–	cvelist
Debian	[SECURITY] [DSA 4929-1] rails security update	9 Jun 202121:11	–	debian
Debian CVE	CVE-2021-22880	11 Feb 202116:11	–	debiancve

Vulners

Node

OR

rails_core ruby_on_railsRange4.2.0–5.2.4.5

rails_core ruby_on_railsRange6.0.0–6.0.3.5

rails_core ruby_on_railsRange6.1.0–6.1.2.1

Source	Link
discuss	www.discuss.rubyonrails.org/t/cve-2021-22880-possible-dos-vulnerability-in-active-record-postgresql-adapter/77129
hackerone	www.hackerone.com/reports/1023899
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-22880
security-tracker	www.security-tracker.debian.org/tracker/CVE-2021-22880
wiki	www.wiki.astralinux.ru/astra-linux-se17-bulletin-2021-1126SE17
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.1/
web	www.web.nvd.nist.gov/view/vuln/detail

17 Oct 2022 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 25

CVSS 37.5

EPSS0.04434

uncontrolled resource consumption rails postgres adapter service failures security vulnerability