Lucene search
Redhat.comRH:CVE-2023-27539HistoryMar 19, 2023 - 3:39 p.m.
CVE-2023-27539
2023-03-1915:39:04
redhat.com
access.redhat.com
15
A denial of service vulnerability was found in rubygem-rack in how it parses headers. A carefully crafted input can cause header parsing to take an unexpected amount of time, possibly resulting in a denial of service.
Mitigation
Setting Regexp.timeout in Ruby 3.2 is a possible workaround.
References
bugzilla.redhat.com/show_bug.cgi?id=2179649
discuss.rubyonrails.org/t/cve-2023-27539-possible-denial-of-service-vulnerability-in-racks-header-parsing/82466
github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2023-27539.yml
nvd.nist.gov/vuln/detail/CVE-2023-27539
rubysec.com/advisories/CVE-2023-27539/
www.cve.org/CVERecord?id=CVE-2023-27539
Related
freebsd
freebsd
rack -- possible denial of service vulnerability in header parsing
2023-03-13 00:00:00
amazon
amazon
Medium: pcs
2023-04-27 18:36:00
veracode
veracode
Regular Expression Denial Of Service (ReDoS)
2023-03-17 02:16:44
debiancve
debiancve
CVE-2023-27539
2023-03-15 02:20:20
nessus
nessus
ubuntucve
ubuntucve
CVE-2023-27539
2023-03-22 00:00:00
github
github
Possible Denial of Service Vulnerability in Rack's header parsing
2023-03-15 21:36:02
hackerone
hackerone
cve
cve
CVE-2023-27539
2023-03-15 02:20:20
mageia
mageia
Updated ruby-rack fixes a vulnerability and some bugs
2024-02-19 20:35:05
osv
osv
Possible Denial of Service Vulnerability in Rack's header parsing
2023-03-15 21:36:02
Moderate: pcs security and bug fix update
2023-05-18 19:18:23
ruby-rack - security update
2023-04-17 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2024-0042)
2024-02-20 00:00:00
Debian: Security Advisory (DLA-3392-1)
2023-04-19 00:00:00
Ubuntu: Security Advisory (USN-6689-1)
2024-03-13 00:00:00
debian
debian
[SECURITY] [DLA 3392-1] ruby-rack security update
2023-04-17 13:57:17
[SECURITY] [DLA 3392-1] ruby-rack security update
2023-04-17 14:31:02
[SECURITY] [DSA 5530-1] ruby-rack security update
2023-10-22 12:35:21
almalinux
almalinux
Moderate: pcs security and bug fix update
2023-05-16 00:00:00
Important: pcs security and bug fix update
2023-05-09 00:00:00
rubygems
rubygems
Possible Denial of Service Vulnerability in Rack’s header parsing
2023-03-12 21:00:00
redhat
redhat
(RHSA-2023:3403) Moderate: pcs security and bug fix update
2023-05-31 15:30:50
(RHSA-2023:1981) Moderate: pcs security and bug fix update
2023-04-25 09:58:19
(RHSA-2023:3082) Moderate: pcs security and bug fix update
2023-05-16 09:15:08
oraclelinux
oraclelinux
pcs security update
2023-05-29 00:00:00
pcs security update
2023-07-20 00:00:00
rocky
rocky
pcs security and bug fix update
2023-05-18 19:18:23
pcs security and bug fix update
2023-05-25 19:53:02
Satellite 6.14 security and bug fix update
2023-11-11 22:58:57
ubuntu
ubuntu
Rack vulnerabilities
2024-03-12 00:00:00
redos
redos
ROS-20240403-12
2024-04-03 00:00:00
ibm
ibm
Related for RH:CVE-2023-27539