Rack is a modular Ruby web server interface. Carefully crafted content type headers can cause Rack’s media type parser to take much longer than expected, leading to a possible denial of service vulnerability (ReDos 2nd degree polynomial). This vulnerability is patched in 3.0.9.1 and 2.2.8.1.
Metrics
Affected Vendors & Products
References
History
Thu, 05 Dec 2024 15:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Redhat satellite
Redhat satellite Capsule |
|
CPEs | cpe:/a:redhat:satellite:6.15::el8 cpe:/a:redhat:satellite_capsule:6.15::el8 |
|
Vendors & Products |
Redhat satellite
Redhat satellite Capsule |
MITRE
Status: PUBLISHED
Assigner: GitHub_M
Published: 2024-02-28T23:28:07.073Z
Updated: 2024-08-12T17:43:32.571Z
Reserved: 2024-02-05T14:14:46.381Z
Link: CVE-2024-25126
Vulnrichment
Updated: 2024-08-01T23:36:21.617Z
NVD
Status : Awaiting Analysis
Published: 2024-02-29T00:15:51.200
Modified: 2024-11-21T09:00:18.637
Link: CVE-2024-25126
Redhat