Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:CVE-2024-26141
HistoryFeb 29, 2024 - 12:15 a.m.

CVE-2024-26141

2024-02-2900:15:51
Google
osv.dev
6
cve-2024-26141
rack web server
range headers
denial of service
vulnerability
fixed version
software

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.0%

JSON

Rack is a modular Ruby web server interface. Carefully crafted Range headers can cause a server to respond with an unexpectedly large response. Responding with such large responses could lead to a denial of service issue. Vulnerable applications will use the Rack::File middleware or the Rack::Utils.byte_ranges methods (this includes Rails applications). The vulnerability is fixed in 3.0.9.1 and 2.2.8.1.

CPENameOperatorVersion
rackeq2.2.3
rackeq1.2.1
rackeq2.2.5
rackeq3.0.4.2
rackeq0.2
rackeq1.5.1
rackeq2.0.1
rackeq3.0.2
rackeq3.0.6
rackeq1.0
Rows per page:
1-10 of 521

Related

debiancve 1
github 1
wolfi 1
prion 1
ubuntucve 1
cve 1
cgr 1
redhatcve 1
veracode 1
cvelist 1
osv 5
rubygems 1
nessus 18
debian 2
oraclelinux 2
openvas 5
redhat 8
mageia 1
ubuntu 1
almalinux 1
amazon 1
redos 1
debiancve
debiancve
CVE-2024-26141
2024-02-29 00:15:51
github
github
Rack has possible DoS Vulnerability with Range Header
2024-02-28 22:57:12
wolfi
wolfi
CVE-2024-26141 vulnerabilities
2024-06-02 03:07:39
prion
prion
Design/Logic Flaw
2024-02-29 00:15:00
ubuntucve
ubuntucve
CVE-2024-26141
2024-02-29 00:00:00
cve
cve
CVE-2024-26141
2024-02-29 00:15:51
cgr
cgr
CVE-2024-26141 vulnerabilities
2024-05-19 03:07:16
redhatcve
redhatcve
CVE-2024-26141
2024-02-23 03:02:28
veracode
veracode
Denial Of Service (DoS)
2024-02-29 06:31:11
cvelist
cvelist
CVE-2024-26141 Possible DoS Vulnerability with Range Header in Rack
2024-02-28 23:28:10
osv
osv
Rack has possible DoS Vulnerability with Range Header
2024-02-28 22:57:12
ruby-rack - security update
2024-05-24 00:00:00
Moderate: pcs security update
2024-05-22 00:00:00
rubygems
rubygems
Possible DoS Vulnerability with Range Header in Rack
2024-02-20 21:00:00
nessus
nessus
RHEL 8 : pcs (RHSA-2024:2007)
2024-04-24 00:00:00
RHEL 8 : pcs (RHSA-2024:3431)
2024-05-28 00:00:00
Amazon Linux 2 : pcs (ALAS-2024-2492)
2024-03-18 00:00:00
debian
debian
[SECURITY] [DSA 5698-1] ruby-rack security update
2024-05-24 16:43:43
[SECURITY] [DLA 3800-1] ruby-rack security update
2024-04-29 09:44:51
oraclelinux
oraclelinux
pcs security update
2024-05-02 00:00:00
pcs security update
2024-05-23 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-5698-1)
2024-05-27 00:00:00
Debian: Security Advisory (DLA-3800-1)
2024-04-30 00:00:00
Ubuntu: Security Advisory (USN-6689-1)
2024-03-13 00:00:00
redhat
redhat
(RHSA-2024:2953) Moderate: pcs security update
2024-05-22 06:35:11
(RHSA-2024:2113) Moderate: pcs security update
2024-04-30 06:14:46
(RHSA-2024:2581) Moderate: pcs security update
2024-04-30 14:00:44
mageia
mageia
Updated ruby-rack packages fix security vulnerabilities
2024-04-12 23:45:19
ubuntu
ubuntu
Rack vulnerabilities
2024-03-12 00:00:00
almalinux
almalinux
Moderate: pcs security update
2024-05-22 00:00:00
amazon
amazon
Medium: pcs
2024-03-13 20:26:00
redos
redos
ROS-20240508-01
2024-05-08 00:00:00

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.0%

JSON
Related for OSV:CVE-2024-26141
debiancve1github1wolfi1prion1ubuntucve1cve1cgr1redhatcve1veracode1cvelist1osv5rubygems1nessus18debian2oraclelinux2openvas5redhat8mageia1ubuntu1almalinux1amazon1redos1