rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing

A denial of service DoS vulnerability was found in rubygem-rack in how it parses Rack Header. Carefully crafted headers can cause header parsing in Rack to take longer than expected, resulting in a possible denial of service issue. Accept and Forwarded headers are impacted...

rubygem-rack: Possible DoS Vulnerability with Range Header in Rack

A denial of service DoS vulnerability was found in rubygem-rack in how it parses Range Header. Carefully crafted range headers can cause a server to respond with an unexpectedly large response. Responding with large responses could lead to a denial of service issue...

The vulnerability of the BIOS software on Dell PowerEdge servers and Dell Precision Rack workstations relates to improper management of privileges, allowing an attacker to elevate their own privileges.

The vulnerability of the BIOS software on Dell PowerEdge servers and Dell Precision Rack workstations is related to incorrect privilege management. Exploiting this vulnerability can allow attackers to enhance their privileges...

Mageia: Security Advisory (MGASA-2024-0123)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated ruby-rack packages fix security vulnerabilities

Carefully crafted content type headers can cause Rack’s media type parser to take much longer than expected, leading to a possible denial of service vulnerability ReDos 2nd degree polynomial. CVE-2024-25126 Carefully crafted Range headers can cause a server to respond with an unexpectedly large...

SUSE-SU-2024:1131-1 Security update for rubygem-rack

This update for rubygem-rack fixes the following issues: - CVE-2024-25126: Fixed a denial-of-service vulnerability in Rack Content-Type parsing bsc1220239. - CVE-2024-26141: Fixed a denial-of-service vulnerability in Range request header parsing bsc1220242. - CVE-2024-26146: Fixed a...

The vulnerability of the modular interface between web servers and web applications in Rack, related to the inefficient complexity of regular expressions, allows attackers to trigger service failures.

The vulnerability of the modular interface between web servers and web applications in Rack relates to the processing of input data, which can take an unexpected amount of time. Exploiting this vulnerability allows a malicious actor to cause service failures...

The vulnerability of the Range component in the module interface between web servers and web applications in Rack architecture allows a attacker to cause a service failure.

The vulnerability of the Range component in the module interface between web servers and web applications in Rack is related to the processing of input data according to RFC2183. This can take an unexpected amount of time. Exploiting this vulnerability could allow a malicious actor to cause servi...

The vulnerability of the modular interface between web servers and web applications in Rack, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of the modular interface between web servers and Rack web applications is related to the creation of input data that can lead to an excessive amount of time being spent analyzing the Content-Disposition header in Rack. Exploiting this vulnerability could allow a remote attacker ...

ROS-20240404-10

A vulnerability in the Rack module of the Ruby programming language interpreter is associated with uncontrolled consumption of resources. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of denial of service...

The vulnerability of the Range header analysis component in the module interface between web servers and web applications in Rack architecture allows a attacker to cause a service failure.

The vulnerability of the Range header analysis component in the module interface between web servers and web applications in Rack relates to the processing of input data, which can take an unexpected amount of time. Exploiting this vulnerability may allow a malicious actor to cause service failur...

Internet Bug Bounty: [CVE-2024-25126] Denial of Service Vulnerability in Rack Content-Type Parsing

A denial of service vulnerability was discovered in the content type parsing component of Rack. The vulnerability was assigned the CVE identifier CVE-2024-25126. The vulnerability affected versions 0.4 and above of Rack, and was addressed in versions 3.0.9.1 and 2.2.8.1...

CVE-2024-0172

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper privilege management security vulnerability. An unauthenticated local attacker could potentially exploit this vulnerability, leading to privilege escalation...

CVE-2024-0172

CVE-2024-0172 affects Dell PowerEdge Server BIOS and Dell Precision Rack BIOS. The vulnerability is due to improper privilege management, enabling an unauthenticated local attacker to achieve privilege escalation. Affected component is the BIOS, with exploitability local and high impact on confid...

Dell PowerEdge Server BIOS 和 Dell Precision Rack BIOS 安全漏洞

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS are both products of Dell USA.Dell PowerEdge Server BIOS is a system update driver from Dell.Dell Precision Rack BIOS is the Dell Precision Rack BIOS is a BIOS utility for high performance workstation products. A security vulnerability exist...

ROS-20240403-12

A vulnerability in the Range header analysis component of the modular interface between web servers and the Rack web applications is related to the creation of input data that could cause the analysis of the Content-Disposition header in Rack to take an unexpected amount of time...

PT-2024-2751 · Dell · Dell Poweredge Server Bios +1

Name of the Vulnerable Software and Affected Versions: Dell PowerEdge Server BIOS affected versions not specified Dell Precision Rack BIOS affected versions not specified Description: The issue is related to improper privilege management in the BIOS of Dell PowerEdge Server and Dell Precision Rac...

SUSE SLES12 Security Update : rubygem-rack-1_4 (SUSE-SU-2024:0946-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0946-1 advisory. - CVE-2024-25126: Fixed a Denial of Service Vulnerability in Rack Content-Type Parsing bsc1220239 - CVE-2024-26141: Fixed a Denial ...

The vulnerability of the BIOS software in Dell PowerEdge servers and Dell Precision Rack workstations allows a perpetrator to gain unauthorized access to protected information and compromise the system.

The vulnerability of Time-of-Check-Time-of-Use TOCTOU and race conditions in the microprogramming software of Dell PowerEdge server and Dell Precision Rack workstations’ BIOS is related to state management errors. Exploiting this vulnerability can allow attackers to gain unauthorized access to...

SUSE-SU-2024:0946-1 Security update for rubygem-rack-1_4

This update for rubygem-rack-14 fixes the following issues: - CVE-2024-25126: Fixed a Denial of Service Vulnerability in Rack Content-Type Parsing bsc1220239 - CVE-2024-26141: Fixed a Denial of Service Vulnerability in Range request header parsing bsc1220242 - CVE-2024-26146: Fixed a Denial of...