USN-6837-1

Dashboard / Vulnerabilities / USN-6837-1

USN-6837-1

Summary: ruby-rack vulnerabilities

Details: It was discovered that Rack incorrectly handled Multipart MIME parsing. A remote attacker could possibly use this issue to cause Rack to consume resources, leading to a denial of service. This issue only affected Ubuntu 23.10. (CVE-2023-27530) It was discovered that Rack incorrectly parsed certain media types. A remote attacker could possibly use this issue to cause Rack to consume resources, leading to a denial of service. (CVE-2024-25126) It was discovered that Rack incorrectly handled certain Range headers. A remote attacker could possibly use this issue to cause Rack to create large responses, leading to a denial of service. This issue only affected Ubuntu 24.04 LTS. (CVE-2024-26141) It was discovered that Rack incorrectly handled certain crafted headers. A remote attacker could possibly use this issue to cause Rack to consume resources, leading to a denial of service. This issue only affected Ubuntu 24.04 LTS. (CVE-2024-26146)

References: https://ubuntu.com/security/notices/USN-6837-1, https://ubuntu.com/security/CVE-2023-27530, https://ubuntu.com/security/CVE-2024-25126, https://ubuntu.com/security/CVE-2024-26141, https://ubuntu.com/security/CVE-2024-26146