PT-2023-18700 · Unknown+4 · Action Dispatch+4
Ooooooo_Q
·
Published
2023-01-18
·
Updated
2025-09-29
·
CVE-2023-22792
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Action Dispatch versions prior to 6.0.6.1
Action Dispatch versions prior to 6.1.7.1
Action Dispatch versions prior to 7.0.4.1
Description
A regular expression based DoS issue in Action Dispatch is related to insufficient input validation. Exploitation of this issue can allow a remote attacker to cause a denial of service. Specially crafted cookies, in combination with a specially crafted
X FORWARDED HOST header, can cause the regular expression engine to enter a state of catastrophic backtracking, leading to high CPU and memory usage.Recommendations
For versions prior to 6.0.6.1, upgrade to version 6.0.6.1 or later.
For versions prior to 6.1.7.1, upgrade to version 6.1.7.1 or later, or apply the patch
6-1-Use-string-split-instead-of-regex-for-domain-parts.patch.
For versions prior to 7.0.4.1, upgrade to version 7.0.4.1 or later, or apply the patch 7-0-Use-string-split-instead-of-regex-for-domain-parts.patch.
As a temporary workaround, consider using a load balancer or other device to filter out malicious X FORWARDED HOST headers before they reach the application.Exploit
Fix
DoS
RCE
Resource Exhaustion
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Action Dispatch
Red Os
Rocky Linux
Suse