CVE-2011-3186 actionpack CRLF injection vulnerability
MediumCVSS 4.3
EPSS 1.7%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
CRLF injection vulnerability in actionpack/lib/action_controller/response.rb in Ruby on Rails 2.3.x before 2.3.13 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the Content-Type header.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rubygems actionpack(RubyGems) | >= 2.3.0, < 2.3.13 | 2.3.13 |
| rubygems actionpack(RubyGems) | = 2.3.10 | No fix listed |
| rubygems actionpack(RubyGems) | = 2.3.11 | No fix listed |
| rubygems actionpack(RubyGems) | = 2.3.12 | No fix listed |
| rubygems actionpack(RubyGems) | = 2.3.2 | No fix listed |
| rubygems actionpack(RubyGems) | = 2.3.3 | No fix listed |
| rubygems actionpack(RubyGems) | = 2.3.4 | No fix listed |
| rubygems actionpack(RubyGems) | = 2.3.5 | No fix listed |
| rubygems actionpack(RubyGems) | = 2.3.6 | No fix listed |
| rubygems actionpack(RubyGems) | = 2.3.7 | No fix listed |
| rubygems actionpack(RubyGems) | = 2.3.8 | No fix listed |
| rubygems actionpack(RubyGems) | = 2.3.8.pre1 | No fix listed |
| rubygems actionpack(RubyGems) | = 2.3.9 | No fix listed |
| rubygems actionpack(RubyGems) | = 2.3.9.pre | No fix listed |
| debian/rails(Debian:12) | < 2.3.14 | 2.3.14 |
| debian/rails(Debian:13) | < 2.3.14 | 2.3.14 |
| debian/rails(Debian:14) | < 2.3.14 | 2.3.14 |
| rubyonrails rails | = 2.3.2 | No fix listed |
| rubyonrails rails | = 2.3.3 | No fix listed |
| rubyonrails rails | = 2.3.4 | No fix listed |
| rubyonrails rails | = 2.3.9 | No fix listed |
| rubyonrails rails | = 2.3.10 | No fix listed |
| rubyonrails rails | = 2.3.11 | No fix listed |
| rubyonrails rails | = 2.3.12 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com patch
- bugzilla.redhat.com patch
- [rubyonrails-security] 20110816 Response Splitting Vulnerability in Ruby on Rails mailing-list patch
- FEDORA-2011-11567 vendor-advisory
- DSA-2301 vendor-advisory
- [oss-security] 20110817 CVE request: ruby on rails flaws (4) mailing-list patch
- [oss-security] 20110819 Re: CVE request: ruby on rails flaws (4) mailing-list patch
- [oss-security] 20110820 Re: CVE request: ruby on rails flaws (4) mailing-list patch
- [oss-security] 20110822 Re: CVE request: ruby on rails flaws (4) mailing-list patch
- [oss-security] 20110822 Re: CVE request: ruby on rails flaws (4) mailing-list
- [oss-security] 20110822 Re: CVE request: ruby on rails flaws (4) mailing-list patch
- github.com exploit
- groups.google.com
- web.archive.org
- github.com
- github.com product
- Debian Security Tracker CVE-2011-3186 vendor-advisory
- 45921 third-party-advisory