PT-2016-1412 · Ruby On Rails+1 · Action Pack+1

Aaron Patterson · Published 2016-01-31 · Updated 2019-08-08 · CVE-2015-7581

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Action Pack versions 4.x through 4.2.5.0 Action Pack versions 5.x through 5.0.0.beta1.0

Description The issue is related to errors in resource management in the actionpack/lib/action dispatch/routing/route set.rb component of the Action Pack in Ruby on Rails. It allows a remote attacker to cause a denial of service by exploiting an application's use of a wildcard controller route, leading to superfluous caching and memory consumption.

Recommendations For Action Pack versions 4.x through 4.2.5.0, update to version 4.2.5.1 or later. For Action Pack versions 5.x through 5.0.0.beta1.0, update to version 5.0.0.beta1.1 or later.

Exploit

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

BDU:2016-00713

CVE-2015-7581

DSA-3464-1

GHSA-544J-77X9-H938

GHSA-9H6G-GP95-X3Q5

RHSA-2016:0296

RHSA-2016:0454

SUSE-SU-2016:0457-1

SUSE-SU-2016:0858-1

SUSE-SU-2016:1146-1

Affected Products

Action Pack

Suse

References · 79

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/rails_dynamic_render_code_exec.rb · Exploit
• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2015-7581.yml · Exploit
• 🔥 https://github.com/forced-request/rails-rce-cve-2016-0752 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0752 · Security Note
• https://osv.dev/vulnerability/DSA-3464-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7581 · Security Note
• https://bdu.fstec.ru/vul/2016-00815 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2016:1146-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/DSA-3464-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-7581 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3226 · Security Note
• https://bdu.fstec.ru/vul/2016-00577 · Security Note
• http://debian.org/security/2016/dsa-3464 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7577 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0751 · Security Note