CVE-2012-6109
1 advisory.
RubyGems/rack CVE-2012-6109: medium, EPSS 2.72%
Rack vulnerable to REDoS
Action: Upgrade rack to 1.1.4 or later.
bundle update rackAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.1.4 | - |
| 1.2.0 | 1.2.6 | - |
| 1.3.0 | 1.3.7 | - |
| 1.4.0 | 1.4.2 | - |
Fixed versions
| 1.1.4 | 1.2.6 | 1.3.7 | 1.4.2 |
Sources
- osv: GHSA-h77x-m5q8-c29h
- https://nvd.nist.gov/vuln/detail/CVE-2012-6109
- https://github.com/rack/rack/commit/c9f65df37a151821eb88ddd1dc404b83e52c52d5
- https://access.redhat.com/errata/RHSA-2013:0544
- https://access.redhat.com/security/cve/CVE-2012-6109
- https://bugzilla.redhat.com/show_bug.cgi?id=895277
- https://github.com/rack/rack
- https://github.com/rack/rack/blob/master/README.rdoc
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2012-6109.yml
- https://groups.google.com/forum/#!msg/rack-devel/1w4_fWEgTdI/XAkSNHjtdTsJ
- https://groups.google.com/forum/#%21msg/rack-devel/1w4_fWEgTdI/XAkSNHjtdTsJ
- https://rhn.redhat.com/errata/RHSA-2013-0544.html
CVE-2012-6109 · published · modified · JSON