Back

MEDIUM

rubygem-rack: Potential Denial of Service Vulnerability in Rack normalize_params()

Published Jul 26, 2015

Description

lib/rack/utils.rb in Rack before 1.5.4 and 1.6.x before 1.6.2, as used with Ruby on Rails 3.x and 4.x and other products, allows remote attackers to cause a denial of service (SystemStackError) via a request with a large parameter depth.

Affected products

Remediation

No remediation recorded yet.

Metrics

References (18)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner redhat
Published Jul 26, 2015
Updated Aug 6, 2024
Reserved Apr 10, 2015
NVD
Status Modified
Modified Jun 17, 2026
Red Hat
Severity Moderate
Public date Jun 16, 2015
GHSA-RGR4-9JH5-J4J6