Most recent entries from all

BREW-travis-CVE-2012-6109 — Rack vulnerable to REDoS

Affected: Homebrew: travis

`lib/rack/multipart.rb` in Rack before 1.1.4, 1.2.x before 1.2.6, 1.3.x before 1.3.7, and 1.4.x before 1.4.2 uses an incorrect regular expression, which allows remote attackers to cause a denial of service (infinite loop) via a crafted Content-Disposion header.

EUVD-2026-113442

fkie_cve-2012-6109

lib/rack/multipart.rb in Rack before 1.1.4, 1.2.x before 1.2.6, 1.3.x before 1.3.7, and 1.4.x before 1.4.2 uses an incorrect regular expression, which allows remote attackers to cause a denial of service (infinite loop) via a crafted Content-Disposion header.

GHSA-h77x-m5q8-c29h — Rack vulnerable to REDoS

Affected: RubyGems: rack

gsd-2012-6109

RHSA-2013:0544 — Red Hat Security Advisory: Subscription Asset Manager 1.2 update

Katello: /etc/katello/secure/passphrase is world readable Katello: lack of authorization in proxies_controller.rb rubygem-rack: parsing Content-Disposition header DoS rubygem-ruby_parser: incorrect temporary file usage rubygem-rack: receiving excessively long lines triggers out-of-memory error rubygem-rack: Rack::Auth:: AbstractRequest DoS

UBUNTU-CVE-2012-6109

Affected: Ubuntu:14.04:LTS: ruby-rack