CVE-2018-16470

2018-11-13T23:29:00
ID CVE-2018-16470
Type cve
Reporter cve@mitre.org
Modified 2019-01-30T21:51:00

Description

There is a possible DoS vulnerability in the multipart parser in Rack before 2.0.6. Specially crafted requests can cause the multipart parser to enter a pathological state, causing the parser to use CPU resources disproportionate to the request size.