PT-2016-1510 · Ruby On Rails+2 · Action Pack+2

Aaron Patterson

·

Publicado

2016-01-31

·

Atualizado

2019-08-08

·

CVE-2016-0751

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Action Pack in Ruby on Rails versions 3.2.x through 3.2.22, 4.0.x through 4.1.14, 4.2.x through 4.2.5, and 5.x before 5.0.0.beta1.1
Description The issue is related to the improper restriction of the MIME type cache in the actionpack/lib/action dispatch/http/mime type.rb file. This allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP Accept header.
Recommendations For versions 3.2.x through 3.2.22, update to version 3.2.22.1 or later. For versions 4.0.x through 4.1.14, update to version 4.1.14.1 or later. For versions 4.2.x through 4.2.5, update to version 4.2.5.1 or later. For versions 5.x before 5.0.0.beta1.1, update to version 5.0.0.beta1.1 or later.

Exploit

Correção

DoS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2016-00811
CVE-2016-0751
DLA-604-1
DSA-3464-1
GHSA-FFPV-C4HM-3X6V
GHSA-M53F-RHQ8-Q6HF
RHSA-2016:0296
RHSA-2016:0454
RHSA-2016:0455
SUSE-SU-2016:0457-1
SUSE-SU-2016:0618-1
SUSE-SU-2016:0858-1
SUSE-SU-2016:1146-1
SUSE-SU-2017:0475-1

Produtos afetados

Action Pack
Ruby On Rails
Suse