Lucene search

CVE-2024-25126

🗓️ 29 Feb 2024 00:51:15Reported by [email protected]Type

Rack web server interface media type parser vulnerability patched in versions 3.0.9.1 and 2.2.8.1

Reporter	Title	Published	Views	Family All 88
OSV	CGA-x8gc-x5hw-p9g9	6 Jun 202412:26	–	osv
OSV	CGA-6jhx-xgjg-cx6p	6 Jun 202412:23	–	osv
OSV	CGA-266c-v62g-2862	6 Jun 202412:20	–	osv
OSV	Rack vulnerable to ReDoS in content type parsing (2nd degree polynomial)	28 Feb 202422:57	–	osv
OSV	CVE-2024-25126	29 Feb 202400:15	–	osv
OSV	CGA-pqqq-69p9-48g7	6 Jun 202412:26	–	osv
OSV	CGA-cmc5-rr8w-45qc	6 Jun 202412:25	–	osv
OSV	ruby-rack - security update	29 Apr 202400:00	–	osv
OSV	Red Hat Security Advisory: pcs security update	30 Sep 202416:38	–	osv
OSV	ruby-rack - security update	24 May 202400:00	–	osv

Source	Link
github	www.github.com/rack/rack/commit/6efb2ceea003c4b195815a614e00438cbd543462
discuss	www.discuss.rubyonrails.org/t/denial-of-service-vulnerability-in-rack-content-type-parsing/84941
lists	www.lists.debian.org/debian-lts-announce/2024/04/msg00022.html
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2024-25126.yml
github	www.github.com/rack/rack/security/advisories/GHSA-22f2-v57c-j9cx
github	www.github.com/rack/rack/commit/d9c163a443b8cadf4711d84bd2c58cb9ef89cf49
security	www.security.netapp.com/advisory/ntap-20240510-0005/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

29 Feb 2024 00:15Current

5.2Medium risk

Vulners AI Score5.2

CVSS35.3

EPSS0.000

CWE-1333

rack web server interface; media type parser; vulnerability; patched version; denial of service; redos 2nd degree polynomial