CVE-2015-3225
EUVD-2017-030226.07.2015, 22:59
lib/rack/utils.rb in Rack before 1.5.4 and 1.6.x before 1.6.2, as used with Ruby on Rails 3.x and 4.x and other products, allows remote attackers to cause a denial of service (SystemStackError) via a request with a large parameter depth.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| rack_project | rack | 𝑥 ≤ 1.5.3 |
| rack_project | rack | 1.6.0 |
| rack_project | rack | 1.6.1 |
| opensuse | opensuse | 13.1 |
| opensuse | opensuse | 13.2 |
| debian | debian_linux | 7.0 |
| debian | debian_linux | 8.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| librack-ruby |
| ||||||||||||||||||||||||||||||||||||
| ruby-rack |
| ||||||||||||||||||||||||||||||||||||
| ruby-rack1.4 |
|
Common Weakness Enumeration
References