Rack 'normalize_params()' Function Denial of Service Vulnerability
BID:75232
Info
Rack 'normalize_params()' Function Denial of Service Vulnerability
| Bugtraq ID: | 75232 |
| Class: | Unknown |
| CVE: |
CVE-2015-3225 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 16 2015 12:00AM |
| Updated: | Nov 03 2015 07:16PM |
| Credit: | Tomek Rabczak from NCC Group. |
| Vulnerable: |
Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 Christian Neukirchen Rack 1.2 Christian Neukirchen Rack 1.1 Christian Neukirchen Rack 1.0.1 Christian Neukirchen Rack 1.0 Christian Neukirchen Rack 1.4.0 Christian Neukirchen Rack 1.3.6 Christian Neukirchen Rack 1.3.5 Christian Neukirchen Rack 1.2.5 Christian Neukirchen Rack 1.2.4 Christian Neukirchen Rack 1.1.3 Christian Neukirchen Rack 1.1.2 |
| Not Vulnerable: | |
Discussion
Rack 'normalize_params()' Function Denial of Service Vulnerability
Rack is prone to a denial-of-service vulnerability.
Attackers can exploit this issue to cause denial-of-service conditions.
Versions prior to Rack 1.6.5 and 1.5.4 are vulnerable.
Rack is prone to a denial-of-service vulnerability.
Attackers can exploit this issue to cause denial-of-service conditions.
Versions prior to Rack 1.6.5 and 1.5.4 are vulnerable.
Exploit / POC
Rack 'normalize_params()' Function Denial of Service Vulnerability
Attackers can use readily available tools to exploit this issue.
Attackers can use readily available tools to exploit this issue.
Solution / Fix
Rack 'normalize_params()' Function Denial of Service Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.