UBUNTU-CVE-2023-27530
A DoS vulnerability exists in Rack <v3.0.4.2, <v2.2.6.3, <v2.1.4.3 and <v2.0.9.3 within in the Multipart MIME parsing code in which could allow an attacker to craft requests that can be abuse to cause multipart parsing to take longer than expected.
02 / AFFECTED SOFTWARE
Affected packages
4 explicit affected versions
11 explicit affected versions
14 explicit affected versions
12 explicit affected versions
6 explicit affected versions
6 explicit affected versions
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
A DoS vulnerability exists in Rack <v3.0.4.2, <v2.2.6.3, <v2.1.4.3 and <v2.0.9.3 within in the Multipart MIME parsing code in which could allow an attacker to craft requests that can be abuse to cause multipart parsing to take longer than expected.
05 / REFERENCES
Further evidence
- https://discuss.rubyonrails.org/t/cve-2023-27530-possible-dos-vulnerability-in-multipart-mime-parsing/82388
- https://ubuntu.com/security/CVE-2023-27530
- https://ubuntu.com/security/notices/USN-6837-1
- https://ubuntu.com/security/notices/USN-6905-1
- https://ubuntu.com/security/notices/USN-7036-1
- https://www.cve.org/CVERecord?id=CVE-2023-27530