Rack is a modular Ruby web server interface. Carefully crafted Range headers can cause a server to respond with an unexpectedly large response. Responding with such large responses could lead to a denial of service issue. Vulnerable applications will use the `Rack::File` middleware or the `Rack::Utils.byte_ranges` methods (this includes Rails applications). The vulnerability is fixed in 3.0.9.1 and 2.2.8.1.
History

Thu, 05 Dec 2024 15:15:00 +0000

Type Values Removed Values Added
First Time appeared Redhat satellite
Redhat satellite Capsule
CPEs cpe:/a:redhat:satellite:6.15::el8
cpe:/a:redhat:satellite_capsule:6.15::el8
Vendors & Products Redhat satellite
Redhat satellite Capsule

cve-icon MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published: 2024-02-28T23:28:10.503Z

Updated: 2024-08-28T17:55:43.187Z

Reserved: 2024-02-14T17:40:03.688Z

Link: CVE-2024-26141

cve-icon Vulnrichment

Updated: 2024-08-01T23:59:32.578Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2024-02-29T00:15:51.403

Modified: 2024-11-21T09:02:01.023

Link: CVE-2024-26141

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-02-22T00:00:00Z

Links: CVE-2024-26141 - Bugzilla