Rack has possible DoS Vulnerability with Range Header

🗓️ 28 Feb 2024 22:57:12Reported by GitHub Advisory DatabaseType

Possible Denial of Service Vulnerability with Range Header in Rack. CVE-2024-2614

Reporter	Title	Published	Views	Family All 172
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data is vulnerable to denial of service due to Rack ( CVE-2024-26141 )	21 May 202506:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in rack-2.0.7.gem	15 Apr 202503:42	–	ibm
ATTACKERKB	CVE-2026-34826	2 Apr 202616:45	–	attackerkb
Tenable Nessus	Amazon Linux 2 : pcs (ALAS-2024-2492)	18 Mar 202400:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0132: pcs (ALINUX3-SA-2024:0132)	14 May 202500:00	–	nessus
Tenable Nessus	CentOS 8 : pcs (CESA-2024:2953)	22 May 202400:00	–	nessus
Tenable Nessus	Debian dla-3800 : ruby-rack - security update	29 Apr 202400:00	–	nessus
Tenable Nessus	Debian dsa-5698 : ruby-rack - security update	24 May 202400:00	–	nessus
Tenable Nessus	Fedora 43 : rubygem-actioncable / rubygem-actionmailbox / rubygem-actionmailer / etc (2025-203b7db566)	16 Jul 202500:00	–	nessus
Tenable Nessus	Fedora 41 : rubygem-rack (2025-a35addbf9b)	12 Nov 202500:00	–	nessus

Vulners

Node

rack_project rackRange1.3.0–2.2.8.1rubygems

rack_project rackRange3.0.0–3.0.9.1rubygems

Source	Link
github	www.github.com/rack/rack/security/advisories/GHSA-xj5v-6v4g-jfw6
github	www.github.com/rack/rack/commit/4849132bef471adb21131980df745f4bb84de2d9
github	www.github.com/rack/rack/commit/62457686b26d33a15a254c7768c2076e8e02b48b
discuss	www.discuss.rubyonrails.org/t/possible-dos-vulnerability-with-range-header-in-rack/84944
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2024-26141.yml
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-26141
github	www.github.com/advisories/GHSA-xj5v-6v4g-jfw6

18 Mar 2026 05:07Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.15.8 - 7.5

EPSS0.0041

SSVC