CVE-2011-5036 Rack Gem Subject to Denial of Service via Hash Collisions
MediumCVSS 5.0
EPSS 3.9%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Rack before 1.1.3, 1.2.x before 1.2.5, and 1.3.x before 1.3.6 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rubygems rack(RubyGems) | < 1.1.3 | 1.1.3 |
| rubygems rack(RubyGems) | >= 1.2.0, < 1.2.5 | 1.2.5 |
| rubygems rack(RubyGems) | >= 1.3.0, < 1.3.6 | 1.3.6 |
| org.jruby/jruby-parent(Maven) | < 1.6.5.1 | 1.6.5.1 |
| rubygems rack(RubyGems) | = 0.1.0 | No fix listed |
| rubygems rack(RubyGems) | = 0.2.0 | No fix listed |
| rubygems rack(RubyGems) | = 0.3.0 | No fix listed |
| rubygems rack(RubyGems) | = 0.4.0 | No fix listed |
| rubygems rack(RubyGems) | = 0.9.0 | No fix listed |
| rubygems rack(RubyGems) | = 0.9.1 | No fix listed |
| rubygems rack(RubyGems) | = 1.0.0 | No fix listed |
| rubygems rack(RubyGems) | = 1.0.1 | No fix listed |
| rubygems rack(RubyGems) | = 1.1.0 | No fix listed |
| rubygems rack(RubyGems) | = 1.1.1 | No fix listed |
| rubygems rack(RubyGems) | = 1.1.1.pre | No fix listed |
| rubygems rack(RubyGems) | = 1.1.2 | No fix listed |
| rubygems rack(RubyGems) | = 1.2.0 | No fix listed |
| rubygems rack(RubyGems) | = 1.2.1 | No fix listed |
| rubygems rack(RubyGems) | = 1.2.2 | No fix listed |
| rubygems rack(RubyGems) | = 1.2.3 | No fix listed |
| rubygems rack(RubyGems) | = 1.2.4 | No fix listed |
| rubygems rack(RubyGems) | = 1.3.0 | No fix listed |
| rubygems rack(RubyGems) | = 1.3.1 | No fix listed |
| rubygems rack(RubyGems) | = 1.3.2 | No fix listed |
| rubygems rack(RubyGems) | = 1.3.3 | No fix listed |
Show 17 more
| Product | Affected versions | Fixed in |
|---|---|---|
| rubygems rack(RubyGems) | = 1.3.4 | No fix listed |
| rubygems rack(RubyGems) | = 1.3.5 | No fix listed |
| debian/ruby-rack(Debian:12) | < 1.4.0-1 | 1.4.0-1 |
| debian/ruby-rack(Debian:13) | < 1.4.0-1 | 1.4.0-1 |
| debian/ruby-rack(Debian:14) | < 1.4.0-1 | 1.4.0-1 |
| rack project rack | <= 1.1.0 | No fix listed |
| rack project rack | = 1.2.0 | No fix listed |
| rack project rack | = 1.2.1 | No fix listed |
| rack project rack | = 1.2.2 | No fix listed |
| rack project rack | = 1.2.3 | No fix listed |
| rack project rack | = 1.2.4 | No fix listed |
| rack project rack | = 1.3.0 | No fix listed |
| rack project rack | = 1.3.1 | No fix listed |
| rack project rack | = 1.3.2 | No fix listed |
| rack project rack | = 1.3.3 | No fix listed |
| rack project rack | = 1.3.4 | No fix listed |
| rack project rack | = 1.3.5 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- gist.github.com exploit
- DSA-2783 vendor-advisory
- VU#903934 third-party-advisory us-government-resource
- www.ocert.org
- web.archive.org
- github.com exploit
- web.archive.org
- www.nruns.com
- github.com
- Debian Security Tracker CVE-2011-5036 vendor-advisory
- 20111228 n.runs-SA-2011.004 - web programming languages and platforms - DoS through hash table mailing-list
- bugs.debian.org issue-tracking