CVE

Id
87047  
CVE No.
CVE-2016-0751  
Status
Candidate  
Description
actionpack/lib/action_dispatch/http/mime_type.rb in Action Pack in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 does not properly restrict use of the MIME type cache, which allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP Accept header.  
Phase
Assigned (20151216)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
761892 87047 CVE-2016-0751 MLIST:[oss-security] 20160125 [CVE-2016-0751] Possible Object Leak and Denial of Service attack in Action Pack  View
761893 87047 CVE-2016-0751 URL:http://www.openwall.com/lists/oss-security/2016/01/25/9  View
761894 87047 CVE-2016-0751 MLIST:[ruby-security-ann] 20160125 [CVE-2016-0751] Possible Object Leak and Denial of Service attack in Action Pack  View
761895 87047 CVE-2016-0751 URL:https://groups.google.com/forum/message/raw?msg=ruby-security-ann/9oLY_FCzvoc/5CDXbvpYEgAJ  View
761896 87047 CVE-2016-0751 DEBIAN:DSA-3464  View
761897 87047 CVE-2016-0751 URL:http://www.debian.org/security/2016/dsa-3464  View
761898 87047 CVE-2016-0751 FEDORA:FEDORA-2016-94e71ee673  View
761899 87047 CVE-2016-0751 URL:http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178043.html  View
761900 87047 CVE-2016-0751 FEDORA:FEDORA-2016-f486068393  View
761901 87047 CVE-2016-0751 URL:http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178067.html  View
761902 87047 CVE-2016-0751 REDHAT:RHSA-2016:0296  View
761903 87047 CVE-2016-0751 URL:http://rhn.redhat.com/errata/RHSA-2016-0296.html  View
761904 87047 CVE-2016-0751 SUSE:SUSE-SU-2016:1146  View
761905 87047 CVE-2016-0751 URL:http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00053.html  View
761906 87047 CVE-2016-0751 SUSE:openSUSE-SU-2016:0363  View
761907 87047 CVE-2016-0751 URL:http://lists.opensuse.org/opensuse-updates/2016-02/msg00034.html  View
761908 87047 CVE-2016-0751 SUSE:openSUSE-SU-2016:0372  View
761909 87047 CVE-2016-0751 URL:http://lists.opensuse.org/opensuse-updates/2016-02/msg00043.html  View
761910 87047 CVE-2016-0751 BID:81800  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
1387 JVNDB-2016-002160 Android の Qualcomm ARM プロセッサのパフォーマンスイベントマネージャにおける権限を取得される脆弱性 Android の Qualcomm ARM プロセッサのパフォーマンスイベントマネージャには、権限を取得される脆弱性が存在します。 CVE-2016-0843 87047 7.2 8.4 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002160.html  View