PT-2024-26396 · Unknown · Rack-Contrib

Analyst + 3 · Published 2024-05-27 · Updated 2024-05-28 · CVE-2024-35231

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions rack-contrib versions prior to 2.5.0

Description The issue is related to a denial of service vulnerability due to the lack of constraints on user-controlled data profiler runs. This allows for the allocation of resources on the server side with no limitation, potentially leading to a denial of service by remotely controlled data. The vulnerability is caused by the fact that the profiler runs variable is not constrained to any limitation, which would lead to allocating resources on the server side with no limitation.

Recommendations For versions prior to 2.5.0, update to version 2.5.0 or later, which contains a patch for the issue. As a temporary workaround, consider restricting access to the Rack::Profiler middleware to minimize the risk of exploitation. Avoid using the profiler runs parameter in the affected API endpoint until the issue is resolved.

Exploit

Fix

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2024-35231

GHSA-8C8Q-2XW3-J869

Affected Products

Rack-Contrib

References · 12

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/35xxx/CVE-2024-35231.json · Exploit
• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack-contrib/CVE-2024-35231.yml · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-35231 · Security Note
• https://osv.dev/vulnerability/GHSA-8c8q-2xw3-j869 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-35231 · Security Note
• https://osv.dev/vulnerability/CVE-2024-35231 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-35231 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-35231 · Vendor Advisory
• https://github.com/rack/rack-contrib/security/advisories/GHSA-8c8q-2xw3-j869 · Note
• https://github.com/rack/rack-contrib · Note
• https://github.com/rack/rack-contrib/commit/0eec2a9836329051c6742549e65a94a4c24fe6f7 · Note
• https://t.me/cvenotify/81090 · Telegram Post