CVE-2013-0183
published 2013-03-01CVE-2013-0183: multipart/parser.rb in Rack 1.3.x before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to cause a denial of service (memory consumption and…
PriorityP423medium5CVSS 2.0
AVNACLAuNCNINAP
EPSS
3.78%
88.6th percentile
multipart/parser.rb in Rack 1.3.x before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to cause a denial of service (memory consumption and out-of-memory error) via a long string in a Multipart HTTP packet.
Affected
14 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | ruby-rack | < ruby-rack 1.4.1-2.1 (bookworm) | ruby-rack 1.4.1-2.1 (bookworm) |
| rack | rack | >= 1.3.0 < 1.3.8 | 1.3.8 |
| rack | rack | >= 1.4.0 < 1.4.3 | 1.4.3 |
| rack_project | rack | — | — |
| rack_project | rack | — | — |
| rack_project | rack | — | — |
| rack_project | rack | — | — |
| rack_project | rack | — | — |
| rack_project | rack | — | — |
| rack_project | rack | — | — |
| rack_project | rack | — | — |
| rack_project | rack | — | — |
| rack_project | rack | — | — |
| rack_project | rack | — | — |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv5.0MEDIUM
vendor_debian5.0MEDIUM
vendor_redhat5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
rubygem-rack: receiving excessively long lines triggers out-of-memory error
vendor_redhat·2013-01-07·CVSS 5.0
CVE-2013-0183 [MEDIUM] CWE-400 rubygem-rack: receiving excessively long lines triggers out-of-memory error
rubygem-rack: receiving excessively long lines triggers out-of-memory error
multipart/parser.rb in Rack 1.3.x before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to cause a denial of service (memory consumption and out-of-memory error) via a long string in a Multipart HTTP packet.
Package: rubygem193-rack (OpenShift Enterprise 1) - Will not fix
Package: rubygem-rack (OpenShift Enterprise 1) - Will not fix
Package: rubygem-rack (Red Hat Enterprise MRG 2) - Affected
Debian
CVE-2013-0183: ruby-rack - multipart/parser.rb in Rack 1.3.x before 1.3.8 and 1.4.x before 1.4.3 allows rem...
vendor_debian·2013·CVSS 5.0
CVE-2013-0183 [MEDIUM] CVE-2013-0183: ruby-rack - multipart/parser.rb in Rack 1.3.x before 1.3.8 and 1.4.x before 1.4.3 allows rem...
multipart/parser.rb in Rack 1.3.x before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to cause a denial of service (memory consumption and out-of-memory error) via a long string in a Multipart HTTP packet.
Scope: local
bookworm: resolved (fixed in 1.4.1-2.1)
bullseye: resolved (fixed in 1.4.1-2.1)
forky: resolved (fixed in 1.4.1-2.1)
sid: resolved (fixed in 1.4.1-2.1)
trixie: resolved (fixed in 1.4.1-2.1)
OSV
Rack rubygems receiving excessively long lines triggers out-of-memory error
osv·2017-10-24
CVE-2013-0183 [MEDIUM] Rack rubygems receiving excessively long lines triggers out-of-memory error
Rack rubygems receiving excessively long lines triggers out-of-memory error
multipart/parser.rb in Rack 1.3.x before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to cause a denial of service (memory consumption and out-of-memory error) via a long string in a Multipart HTTP packet.
GHSA
Rack rubygems receiving excessively long lines triggers out-of-memory error
ghsa·2017-10-24
CVE-2013-0183 [MEDIUM] CWE-119 Rack rubygems receiving excessively long lines triggers out-of-memory error
Rack rubygems receiving excessively long lines triggers out-of-memory error
multipart/parser.rb in Rack 1.3.x before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to cause a denial of service (memory consumption and out-of-memory error) via a long string in a Multipart HTTP packet.
OSV
CVE-2013-0183: multipart/parser
osv·2013-03-01·CVSS 5.0
CVE-2013-0183 [MEDIUM] CVE-2013-0183: multipart/parser
multipart/parser.rb in Rack 1.3.x before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to cause a denial of service (memory consumption and out-of-memory error) via a long string in a Multipart HTTP packet.
No detection rules found.
No public exploits indexed.
http://lists.opensuse.org/opensuse-updates/2013-03/msg00048.htmlhttp://rack.github.com/http://rhn.redhat.com/errata/RHSA-2013-0544.htmlhttp://rhn.redhat.com/errata/RHSA-2013-0548.htmlhttp://www.debian.org/security/2013/dsa-2783https://bugzilla.redhat.com/show_bug.cgi?id=895282https://github.com/rack/rack/commit/548b9af2dc0059f4c0c19728624448d84de450ffhttps://github.com/rack/rack/commit/f95113402b7239f225282806673e1b6424522b18https://groups.google.com/forum/#%21topic/rack-devel/-MWPHDeGWtIhttps://groups.google.com/forum/#%21topic/rack-devel/7ZKPNAjgRSshttp://lists.opensuse.org/opensuse-updates/2013-03/msg00048.htmlhttp://rack.github.com/http://rhn.redhat.com/errata/RHSA-2013-0544.htmlhttp://rhn.redhat.com/errata/RHSA-2013-0548.htmlhttp://www.debian.org/security/2013/dsa-2783https://bugzilla.redhat.com/show_bug.cgi?id=895282https://github.com/rack/rack/commit/548b9af2dc0059f4c0c19728624448d84de450ffhttps://github.com/rack/rack/commit/f95113402b7239f225282806673e1b6424522b18https://groups.google.com/forum/#%21topic/rack-devel/-MWPHDeGWtIhttps://groups.google.com/forum/#%21topic/rack-devel/7ZKPNAjgRSs
2013-03-01
Published