Denial Of Service (DoS)

2023-03-0901:51:42

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

denial of service

vulnerability

mime parser

attack

software

0.001 Low

EPSS

Percentile

36.9%

JSON

rack is vulnerable to Denial Of Service (DoS). The vulnerability exists in the library’s multipart MIME parser because it does not properly limit the total number of parts that can be uploaded, which allows an attacker to send maliciously crafted requests and crash the application.

CPENameOperatorVersion
rackle1.6.13
rackle3.0.4.1
rackle1.2.8
rackle2.1.4.2
rackle2.2.6.2
rackle2.0.9.2
pcseq0.9.162__5.el7.centos.1
pcseq0.10.14__6.el8
pcseq0.10.11__1.el8
pcseq0.9.169__3.el7.centos.1

Name	Operator	Version
rack	le	1.6.13
rack	le	3.0.4.1
rack	le	1.2.8
rack	le	2.1.4.2
rack	le	2.2.6.2
rack	le	2.0.9.2
pcs	eq	0.9.162__5.el7.centos.1
pcs	eq	0.10.14__6.el8
pcs	eq	0.10.11__1.el8
pcs	eq	0.9.169__3.el7.centos.1