Lucene search

Rack Header Parsing leads to Possible Denial of Service Vulnerability

🗓️ 28 Feb 2024 22:03:57Reported by GitHub Advisory DatabaseType

Possible Denial of Service Vulnerability in Rack Header Parsing. Impact on Accept and Forwarded headers. Ruby 3.2 has mitigations

Reporter	Title	Published	Views	Family All 102
Prion	Design/Logic Flaw	29 Feb 202400:15	–	prion
Chainguard	CVE-2024-26146 vulnerabilities	19 May 202403:07	–	cgr
OSV	CGA-r2vh-pfmh-4jrj	6 Jun 202412:26	–	osv
OSV	CGA-862g-ffq3-q4q4	6 Jun 202412:25	–	osv
OSV	CGA-fhw2-86gf-84wg	6 Jun 202412:27	–	osv
OSV	CGA-qf62-xg23-7wrf	6 Jun 202412:26	–	osv
OSV	CGA-wrrx-g3xj-522x	6 Jun 202412:29	–	osv
OSV	Rack Header Parsing leads to Possible Denial of Service Vulnerability	28 Feb 202422:57	–	osv
OSV	CVE-2024-26146	29 Feb 202400:15	–	osv
OSV	Rack ReDoS Vulnerability in HTTP Accept Headers Parsing	3 Jul 202417:03	–	osv

Vulners

Node

-rackRange<2.0.9.4

-rackRange2.1.0–2.1.4.4

-rackRange2.2.0–2.2.8.1

-rackRange3.0.0–3.0.9.1

Source	Link
github	www.github.com/rack/rack/security/advisories/GHSA-54rr-7fvw-6x8f
github	www.github.com/rack/rack/commit/30b8e39a578b25d4bdcc082c1c52c6f164b59716
github	www.github.com/rack/rack/commit/6c5d90bdcec0949f7ba06db62fb740dab394b582
github	www.github.com/rack/rack/commit/a227cd793778c7c3a827d32808058571569cda6f
github	www.github.com/rack/rack/commit/e4c117749ba24a66f8ec5a08eddf68deeb425ccd
discuss	www.discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2024-26146.yml
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-26146
github	www.github.com/advisories/GHSA-54rr-7fvw-6x8f

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

28 Feb 2024 22:57Current

7.0High risk

Vulners AI Score7.0

EPSS0.000

CWE-1333