CVE-2013-0184 Rack vulnerable to Denial of Service
MediumCVSS 4.3
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in Rack::Auth::AbstractRequest in Rack 1.1.x before 1.1.5, 1.2.x before 1.2.7, 1.3.x before 1.3.9, and 1.4.x before 1.4.4 allows remote attackers to cause a denial of service via unknown vectors related to "symbolized arbitrary strings."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rubygems rack(RubyGems) | >= 1.1.0, < 1.1.5 | 1.1.5 |
| rubygems rack(RubyGems) | >= 1.2.0, < 1.2.7 | 1.2.7 |
| rubygems rack(RubyGems) | >= 1.3.0, < 1.3.9 | 1.3.9 |
| rubygems rack(RubyGems) | >= 1.4.0, < 1.4.4 | 1.4.4 |
| rubygems rack(RubyGems) | = 1.1.0 | No fix listed |
| rubygems rack(RubyGems) | = 1.1.1 | No fix listed |
| rubygems rack(RubyGems) | = 1.1.1.pre | No fix listed |
| rubygems rack(RubyGems) | = 1.1.2 | No fix listed |
| rubygems rack(RubyGems) | = 1.1.3 | No fix listed |
| rubygems rack(RubyGems) | = 1.1.4 | No fix listed |
| rubygems rack(RubyGems) | = 1.2.0 | No fix listed |
| rubygems rack(RubyGems) | = 1.2.1 | No fix listed |
| rubygems rack(RubyGems) | = 1.2.2 | No fix listed |
| rubygems rack(RubyGems) | = 1.2.3 | No fix listed |
| rubygems rack(RubyGems) | = 1.2.4 | No fix listed |
| rubygems rack(RubyGems) | = 1.2.5 | No fix listed |
| rubygems rack(RubyGems) | = 1.2.6 | No fix listed |
| rubygems rack(RubyGems) | = 1.3.0 | No fix listed |
| rubygems rack(RubyGems) | = 1.3.1 | No fix listed |
| rubygems rack(RubyGems) | = 1.3.2 | No fix listed |
| rubygems rack(RubyGems) | = 1.3.3 | No fix listed |
| rubygems rack(RubyGems) | = 1.3.4 | No fix listed |
| rubygems rack(RubyGems) | = 1.3.5 | No fix listed |
| rubygems rack(RubyGems) | = 1.3.6 | No fix listed |
| rubygems rack(RubyGems) | = 1.3.7 | No fix listed |
Show 31 more
| Product | Affected versions | Fixed in |
|---|---|---|
| rubygems rack(RubyGems) | = 1.3.8 | No fix listed |
| rubygems rack(RubyGems) | = 1.4.0 | No fix listed |
| rubygems rack(RubyGems) | = 1.4.1 | No fix listed |
| rubygems rack(RubyGems) | = 1.4.2 | No fix listed |
| rubygems rack(RubyGems) | = 1.4.3 | No fix listed |
| debian/ruby-rack(Debian:12) | < 1.4.1-2.1 | 1.4.1-2.1 |
| debian/ruby-rack(Debian:13) | < 1.4.1-2.1 | 1.4.1-2.1 |
| debian/ruby-rack(Debian:14) | < 1.4.1-2.1 | 1.4.1-2.1 |
| rack project rack | = 1.1.0 | No fix listed |
| rack project rack | = 1.1.2 | No fix listed |
| rack project rack | = 1.1.3 | No fix listed |
| rack project rack | = 1.1.4 | No fix listed |
| rack project rack | = 1.2.0 | No fix listed |
| rack project rack | = 1.2.1 | No fix listed |
| rack project rack | = 1.2.2 | No fix listed |
| rack project rack | = 1.2.3 | No fix listed |
| rack project rack | = 1.2.4 | No fix listed |
| rack project rack | = 1.2.6 | No fix listed |
| rack project rack | = 1.3.0 | No fix listed |
| rack project rack | = 1.3.1 | No fix listed |
| rack project rack | = 1.3.2 | No fix listed |
| rack project rack | = 1.3.3 | No fix listed |
| rack project rack | = 1.3.4 | No fix listed |
| rack project rack | = 1.3.5 | No fix listed |
| rack project rack | = 1.3.6 | No fix listed |
| rack project rack | = 1.3.7 | No fix listed |
| rack project rack | = 1.3.8 | No fix listed |
| rack project rack | = 1.4.0 | No fix listed |
| rack project rack | = 1.4.1 | No fix listed |
| rack project rack | = 1.4.2 | No fix listed |
| rack project rack | = 1.4.3 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- bugzilla.redhat.com
- openSUSE-SU-2013:0462 vendor-advisory
- RHSA-2013:0544 vendor-advisory
- RHSA-2013:0548 vendor-advisory
- DSA-2783 vendor-advisory
- access.redhat.com
- access.redhat.com
- access.redhat.com
- github.com patch
- github.com
- github.com product
- Debian Security Tracker CVE-2013-0184 vendor-advisory
- bugs.debian.org issue-tracking