Denial of service in Ruby on Rails - CVE-2016-0751
Published: September 22, 2017
Vulnerability identifier: #VU8585
CSH Severity: Low
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2016-0751
CWE-ID: CWE-400
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to perform a denial of service (DoS). attack.
actionpack/lib/action_dispatch/http/mime_type.rb in Action Pack in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 does not properly restrict use of the MIME type cache, which allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP Accept header.
actionpack/lib/action_dispatch/http/mime_type.rb in Action Pack in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 does not properly restrict use of the MIME type cache, which allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP Accept header.
Affected software
Ruby on Rails
Fedora
rubygem-activemodel
rubygem-actionpack
Fedora
rubygem-activemodel
rubygem-actionpack
How to mitigate CVE-2016-0751
Update to version 3.2.22.1, 4.1.14.1 or 4.2.5.1.
rubygem-activemodel - update to 4.2.0-2.fc22
rubygem-actionpack - addressed in versions 4.2.0-3.fc22, 4.2.3-4.fc23
rubygem-actionpack - addressed in versions 4.2.0-3.fc22, 4.2.3-4.fc23