Description There is a possible denial of service vulnerability in Action View (Rails) <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 where specially crafted accept headers can cause action view to consume 100% cpu and make the server unresponsive.
CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Exploitability: 3.9 | Impact: 3.6 Attack Vector: Network
Complexity: Low
Privileges: None
User Interaction: None
Scope: Unchanged
Confidentiality: None
Integrity: None
Availability: High
Affected Packages7 packages Show 2 more packages Also affects: Debian Linux 8.0, Fedora 30
🔴 Vulnerability Details4 CVEList CVE-2019-5419: There is a possible denial of service vulnerability in Action View (Rails) <5 ↗ 2019-03-27 ▶ OSV CVE-2019-5419: There is a possible denial of service vulnerability in Action View (Rails) <5 ↗ 2019-03-27 ▶ OSV Denial of Service Vulnerability in Action View ↗ 2019-03-13 ▶ GHSA Denial of Service Vulnerability in Action View ↗ 2019-03-13 ▶
📋 Vendor Advisories2 Red Hat rubygem-actionpack: denial of service vulnerability in Action View ↗ 2019-03-13 ▶ Debian CVE-2019-5419: rails - There is a possible denial of service vulnerability in Action View (Rails) <5.2.... ↗ 2019 ▶
💬 Community2 Bugzilla CVE-2019-5419 rubygem-actionpack: denial of service vulnerability in Action View ↗ 2019-03-15 ▶ Bugzilla CVE-2019-5418 CVE-2019-5419 rubygem-actionview: various flaws [fedora-all] ↗ 2019-03-15 ▶