Lucene search

K
freebsdFreeBSDF0798A6A-BBDB-11ED-BA99-080027F5FEC9
HistoryMar 03, 2023 - 12:00 a.m.

rack -- possible DoS vulnerability in multipart MIME parsing

2023-03-0300:00:00
vuxml.freebsd.org
14

0.001 Low

EPSS

Percentile

36.4%

Aaron Patterson reports:

    The Multipart MIME parsing code in Rack limits the number
    of file parts, but does not limit the total number of
    parts that can be uploaded. Carefully crafted requests can
    abuse this and cause multipart parsing to take longer than
    expected.
OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchrubygem-rack< 3.0.4.2,3UNKNOWN
FreeBSDanynoarchrubygem-rack22< 2.2.6.3,3UNKNOWN
FreeBSDanynoarchrubygem-rack16< 1.6.14UNKNOWN