CVE-2013-6414

actionpack/lib/action_view/lookup_context.rb in Action View in Ruby on Rails 3.x before 3.2.16 and 4.x before 4.0.2 allows remote attackers to cause a denial of service (memory consumption) via a header containing an invalid MIME type that leads to excessive caching.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 98%
VendorProductVersion
rubyonrailsrails
𝑥
≤ 4.0.1
rubyonrailsrails
4.0.0
rubyonrailsrails
4.0.0:beta
rubyonrailsrails
4.0.0:rc1
rubyonrailsrails
4.0.0:rc2
rubyonrailsrails
4.0.1:rc1
rubyonrailsrails
3.0.0
rubyonrailsrails
3.0.0:beta
rubyonrailsrails
3.0.0:beta2
rubyonrailsrails
3.0.0:beta3
rubyonrailsrails
3.0.0:beta4
rubyonrailsrails
3.0.0:rc
rubyonrailsrails
3.0.0:rc2
rubyonrailsrails
3.0.1
rubyonrailsrails
3.0.1:pre
rubyonrailsrails
3.0.2
rubyonrailsrails
3.0.2:pre
rubyonrailsrails
3.0.3
rubyonrailsrails
3.0.4:rc1
rubyonrailsrails
3.0.5
rubyonrailsrails
3.0.5:rc1
rubyonrailsrails
3.0.6
rubyonrailsrails
3.0.6:rc1
rubyonrailsrails
3.0.6:rc2
rubyonrailsrails
3.0.7
rubyonrailsrails
3.0.7:rc1
rubyonrailsrails
3.0.7:rc2
rubyonrailsrails
3.0.8
rubyonrailsrails
3.0.8:rc1
rubyonrailsrails
3.0.8:rc2
rubyonrailsrails
3.0.8:rc3
rubyonrailsrails
3.0.8:rc4
rubyonrailsrails
3.0.9
rubyonrailsrails
3.0.9:rc1
rubyonrailsrails
3.0.9:rc2
rubyonrailsrails
3.0.9:rc3
rubyonrailsrails
3.0.9:rc4
rubyonrailsrails
3.0.9:rc5
rubyonrailsrails
3.0.10
rubyonrailsrails
3.0.10:rc1
rubyonrailsrails
3.0.11
rubyonrailsrails
3.0.12
rubyonrailsrails
3.0.12:rc1
rubyonrailsrails
3.0.13
rubyonrailsrails
3.0.13:rc1
rubyonrailsrails
3.0.14
rubyonrailsrails
3.0.16
rubyonrailsrails
3.0.17
rubyonrailsrails
3.0.18
rubyonrailsrails
3.0.19
rubyonrailsrails
3.0.20
rubyonrailsrails
3.1.0
rubyonrailsrails
3.1.0:beta1
rubyonrailsrails
3.1.0:rc1
rubyonrailsrails
3.1.0:rc2
rubyonrailsrails
3.1.0:rc3
rubyonrailsrails
3.1.0:rc4
rubyonrailsrails
3.1.0:rc5
rubyonrailsrails
3.1.0:rc6
rubyonrailsrails
3.1.0:rc7
rubyonrailsrails
3.1.0:rc8
rubyonrailsrails
3.1.1
rubyonrailsrails
3.1.1:rc1
rubyonrailsrails
3.1.1:rc2
rubyonrailsrails
3.1.1:rc3
rubyonrailsrails
3.1.2
rubyonrailsrails
3.1.2:rc1
rubyonrailsrails
3.1.2:rc2
rubyonrailsrails
3.1.3
rubyonrailsrails
3.1.4
rubyonrailsrails
3.1.4:rc1
rubyonrailsrails
3.1.5
rubyonrailsrails
3.1.5:rc1
rubyonrailsrails
3.1.6
rubyonrailsrails
3.1.7
rubyonrailsrails
3.1.8
rubyonrailsrails
3.1.9
rubyonrailsrails
3.1.10
rubyonrailsrails
3.2.0
rubyonrailsrails
3.2.0:rc1
rubyonrailsrails
3.2.0:rc2
rubyonrailsrails
3.2.1
rubyonrailsrails
3.2.2
rubyonrailsrails
3.2.2:rc1
rubyonrailsrails
3.2.3
rubyonrailsrails
3.2.3:rc1
rubyonrailsrails
3.2.3:rc2
rubyonrailsrails
3.2.4
rubyonrailsrails
3.2.4:rc1
rubyonrailsrails
3.2.5
rubyonrailsrails
3.2.6
rubyonrailsrails
3.2.7
rubyonrailsrails
3.2.8
rubyonrailsrails
3.2.9
rubyonrailsrails
3.2.10
rubyonrailsrails
3.2.11
rubyonrailsrails
3.2.12
rubyonrailsrails
3.2.13
rubyonrailsrails
3.2.13:rc1
rubyonrailsrails
3.2.13:rc2
rubyonrailsruby_on_rails
𝑥
≤ 3.2.15
rubyonrailsruby_on_rails
3.0.4
rubyonrailsruby_on_rails
3.1.11
rubyonrailsruby_on_rails
3.2.14
rubyonrailsruby_on_rails
3.2.14:rc1
rubyonrailsruby_on_rails
3.2.14:rc2
rubyonrailsruby_on_rails
3.2.15:rc1
rubyonrailsruby_on_rails
3.2.15:rc2
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
rails
bullseye (security)
2:6.0.3.7+dfsg-2+deb11u2
fixed
bullseye
2:6.0.3.7+dfsg-2+deb11u2
fixed
bookworm
2:6.1.7.3+dfsg-2~deb12u1
fixed
sid
2:6.1.7.3+dfsg-4
fixed
trixie
2:6.1.7.3+dfsg-4
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
rails
bionic
not-affected
artful
not-affected
zesty
not-affected
yakkety
not-affected
xenial
not-affected
wily
not-affected
vivid
not-affected
utopic
not-affected
trusty
dne
saucy
not-affected
raring
not-affected
quantal
not-affected
precise
not-affected
lucid
not-affected
ruby-actionpack-2.3
bionic
dne
artful
dne
zesty
dne
yakkety
dne
xenial
dne
wily
dne
vivid
dne
utopic
dne
trusty
dne
saucy
not-affected
raring
not-affected
quantal
not-affected
precise
not-affected
lucid
dne
ruby-actionpack-3.2
bionic
dne
artful
dne
zesty
dne
yakkety
dne
xenial
dne
wily
dne
vivid
dne
utopic
dne
trusty
dne
saucy
ignored
raring
ignored
quantal
ignored
precise
dne
lucid
dne
ruby-activerecord-3.2
bionic
dne
artful
dne
zesty
dne
yakkety
dne
xenial
dne
wily
dne
vivid
dne
utopic
dne
trusty
dne
saucy
not-affected
raring
not-affected
quantal
not-affected
precise
dne
lucid
dne
ruby-activesupport-3.2
bionic
dne
artful
dne
zesty
dne
yakkety
dne
xenial
dne
wily
dne
vivid
dne
utopic
dne
trusty
dne
saucy
not-affected
raring
not-affected
quantal
not-affected
precise
dne
lucid
dne
ruby-rails-2.3
bionic
dne
artful
dne
zesty
dne
yakkety
dne
xenial
dne
wily
dne
vivid
dne
utopic
dne
trusty
dne
saucy
not-affected
raring
not-affected
quantal
not-affected
precise
not-affected
lucid
dne
ruby-rails-3.2
bionic
dne
artful
dne
zesty
dne
yakkety
dne
xenial
dne
wily
dne
vivid
dne
utopic
dne
trusty
dne
saucy
not-affected
raring
not-affected
quantal
not-affected
precise
dne
lucid
dne
References