Lucene search

CVE-2024-39316 Rack ReDoS Vulnerability in HTTP Accept Headers Parsing

🗓️ 02 Jul 2024 15:39:57Reported by GitHub_MType

Rack ReDoS Vulnerability in HTTP Accept Headers Parsing in versions 3.1.0 to 3.1.

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 118
Vulnrichment	CVE-2024-39316 Rack ReDoS Vulnerability in HTTP Accept Headers Parsing	2 Jul 202415:57	–	vulnrichment
Vulnrichment	CVE-2024-26146 Possible Denial of Service Vulnerability in Rack Header Parsing	28 Feb 202423:28	–	vulnrichment
NVD	CVE-2024-39316	2 Jul 202416:15	–	nvd
NVD	CVE-2024-26146	29 Feb 202400:15	–	nvd
OSV	CVE-2024-39316	2 Jul 202416:15	–	osv
OSV	GHSA-54RR-7FVW-6X8F Rack Header Parsing leads to Possible Denial of Service Vulnerability	28 Feb 202422:57	–	osv
OSV	CGA-FHW2-86GF-84WG	6 Jun 202412:27	–	osv
OSV	GHSA-CJ83-2WW7-MVQ7 Rack ReDoS Vulnerability in HTTP Accept Headers Parsing	3 Jul 202417:03	–	osv
OSV	CGA-QF62-XG23-7WRF	6 Jun 202412:26	–	osv
OSV	CGA-WRRX-G3XJ-522X	6 Jun 202412:29	–	osv

[
  {
    "vendor": "rack",
    "product": "rack",
    "versions": [
      {
        "version": ">= 3.1.0, < 3.1.5",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/rack/rack/security/advisories/GHSA-54rr-7fvw-6x8f
github	www.github.com/rack/rack/security/advisories/GHSA-cj83-2ww7-mvq7
github	www.github.com/rack/rack/commit/412c980450ca729ee37f90a2661f166a9665e058

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

02 Jul 2024 15:57Current

CVSS36.5

EPSS0.0073

CWE-1333