Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2015:2190-1

Опубликовано: 03 дек. 2015
Источник: suse-cvrf

Описание

Security update for rubygem-rack-1_4

rubygem-rack-1_4 was updated to fix one security issue.

This security issue was fixed:

  • CVE-2015-3225: Crafted requests could have caused a SystemStackError leading to Denial of Service (bsc#934797).

Список пакетов

SUSE Enterprise Storage 1.0
ruby2.1-rubygem-rack-1_4-1.4.5-8.10
SUSE Enterprise Storage 2
ruby2.1-rubygem-rack-1_4-1.4.5-8.10
SUSE Linux Enterprise Module for Containers 12
ruby2.1-rubygem-rack-1_4-1.4.5-8.10

Ссылки

Описание

lib/rack/utils.rb in Rack before 1.5.4 and 1.6.x before 1.6.2, as used with Ruby on Rails 3.x and 4.x and other products, allows remote attackers to cause a denial of service (SystemStackError) via a request with a large parameter depth.

Затронутые продукты
SUSE Enterprise Storage 1.0:ruby2.1-rubygem-rack-1_4-1.4.5-8.10
SUSE Enterprise Storage 2:ruby2.1-rubygem-rack-1_4-1.4.5-8.10
SUSE Linux Enterprise Module for Containers 12:ruby2.1-rubygem-rack-1_4-1.4.5-8.10
Ссылки
Уязвимость SUSE-SU-2015:2190-1