CVE-2024-47889

🗓️ 16 Oct 2024 20:55:33Reported by Debian Security Bug TrackerType

debiancve

debiancve🔗 security-tracker.debian.org👁 18 Views

Possible ReDoS vulnerability in Action Mailer block_format helpe

Reporter	Title	Published	Views	Family All 59
IBM Security Bulletins	Security Bulletin: A vulnerability in Ruby on Rails affects IBM License Metric Tool v9.	15 Apr 202503:13	–	ibm
Tenable Nessus	actionmailer Ruby Library 3.x < 6.1.7.9 / 7.0.x < 7.0.8.5 / 7.1.x < 7.1.4.1 / 7.2.x < 7.2.1.1 DoS (CVE-2024-47889)	18 Oct 202400:00	–	nessus
Tenable Nessus	Debian dla-4383 : rails - security update	25 Nov 202500:00	–	nessus
Tenable Nessus	Debian dsa-5881 : rails - security update	19 Mar 202500:00	–	nessus
Tenable Nessus	SUSE SLES15 Security Update : rubygem-actionmailer-5_1 (SUSE-SU-2024:3878-1)	2 Nov 202400:00	–	nessus
Tenable Nessus	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS : Rails vulnerabilities (USN-7290-1)	25 Feb 202500:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2024-47889	6 Mar 202500:00	–	nessus
BDU FSTEC	The vulnerability of the `block_format` function in the Action Text interpreter for Ruby allows a hacker to trigger a service failure.	14 Nov 202400:00	–	bdu_fstec
Circl	CVE-2024-47889	16 Oct 202423:55	–	circl
CNNVD	Rails 安全漏洞	15 Oct 202400:00	–	cnnvd

OS	OS Version	Architecture	Package	Package Version	Filename
Debian	11	any	rails	2:6.0.3.7+dfsg-2+deb11u3	rails_2:6.0.3.7+dfsg-2+deb11u3_any.deb
Debian	12	any	rails	2:6.1.7.10+dfsg-1~deb12u1	rails_2:6.1.7.10+dfsg-1~deb12u1_any.deb
Debian	13	any	rails	2:7.2.2.1+dfsg-1	rails_2:7.2.2.1+dfsg-1_any.deb
Debian	14	any	rails	2:7.2.2.1+dfsg-1	rails_2:7.2.2.1+dfsg-1_any.deb
Debian	999	any	rails	2:7.2.2.1+dfsg-1	rails_2:7.2.2.1+dfsg-1_any.deb

16 Oct 2024 20:55Current

5.3Medium risk

Vulners AI Score5.3

CVSS 48.7

EPSS0.00944

SSVC

action mailer redos vulnerability block_format helper dos vulnerability upgrade patch ruby 3.2 rails 8.0.0.beta1