Lucene search
Gentoo FoundationGLSA-201203-05HistoryMar 06, 2012 - 12:00 a.m.
Rack: Denial of service
2012-03-0600:00:00
Gentoo Foundation
security.gentoo.org
22
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS
0.008
Percentile
81.8%
Background
Rack is a modular Ruby web server interface.
Description
Rack does not properly randomize hash functions to protect against hash collision attacks.
Impact
A remote attacker could send a specially crafted form post, possibly resulting in a Denial of Service condition.
Workaround
There is no known workaround at this time.
Resolution
All Rack users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-ruby/rack-1.1.3"
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Gentoo | any | all | dev-ruby/rack | < 1.1.3 | UNKNOWN |
Related
nessus
nessus
Fedora 15 : rubygem-rack-1.1.0-4.fc15 (2012-0233)
2012-01-17 00:00:00
GLSA-201203-05 : Rack: Denial of Service
2012-03-06 00:00:00
Fedora 16 : rubygem-rack-1.3.0-2.fc16 (2012-0166)
2012-01-17 00:00:00
openvas
openvas
Fedora Update for rubygem-rack FEDORA-2012-0233
2012-01-20 00:00:00
Fedora Update for rubygem-rack FEDORA-2012-0166
2012-03-19 00:00:00
Fedora Update for rubygem-rack FEDORA-2012-0233
2012-01-20 00:00:00
cvelist
cvelist
CVE-2011-5036
2011-12-30 01:00:00
debiancve
debiancve
CVE-2011-5036
2011-12-30 01:55:01
rubygems
rubygems
CVE-2011-5036 rubygem-rack: hash table collisions DoS (oCERT-2011-003)
2011-12-27 20:00:00
github
github
Rack Gem Subject to Denial of Service via Hash Collisions
2022-05-17 04:59:13
osv
osv
Rack Gem Subject to Denial of Service via Hash Collisions
2022-05-17 04:59:13
librack-ruby - several
2013-10-21 00:00:00
prion
prion
Code injection
2011-12-30 01:55:00
fedora
fedora
[SECURITY] Fedora 16 Update: rubygem-rack-1.3.0-2.fc16
2012-01-16 21:23:49
[SECURITY] Fedora 15 Update: rubygem-rack-1.1.0-4.fc15
2012-01-16 21:26:40
[SECURITY] Fedora 16 Update: rubygem-rack-1.3.0-3.fc16
2013-01-25 21:34:26
ubuntucve
ubuntucve
CVE-2011-5036
2011-12-30 00:00:00
cve
cve
CVE-2011-5036
2011-12-30 01:55:01
nvd
nvd
CVE-2011-5036
2011-12-30 01:55:01
debian
debian
[SECURITY] [DSA 2783-1] librack-ruby security update
2013-10-21 19:20:25
[SECURITY] [DSA 2783-2] librack-ruby regression update
2013-10-24 19:29:38
[SECURITY] [DSA 2783-2] librack-ruby regression update
2013-10-24 19:29:38
freebsd
freebsd
Multiple implementations -- DoS via hash algorithm collision
2011-12-28 00:00:00
securityvulns
securityvulns
Librack multiple security vulnerabilities
2013-10-28 00:00:00
[SECURITY] [DSA 2783-2] librack-ruby regression update
2013-10-28 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS
0.008
Percentile
81.8%
Related for GLSA-201203-05