Lucene search

K
freebsdFreeBSD2FDB053C-CA25-11ED-9D7E-080027F5FEC9
HistoryMar 13, 2023 - 12:00 a.m.

rack -- possible denial of service vulnerability in header parsing

2023-03-1300:00:00
vuxml.freebsd.org
8

ooooooo_q reports:

    Carefully crafted input can cause header parsing in Rack
    to take an unexpected amount of time, possibly resulting
    in a denial of service attack vector. Any applications
    that parse headers using Rack (virtually all Rails
    applications) are impacted.
OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchrubygem-rack<Β 3.0.6.1,3UNKNOWN
FreeBSDanynoarchrubygem-rack22<Β 2.2.6.6,3UNKNOWN
FreeBSDanynoarchrubygem-rack16<Β 1.6.14UNKNOWN