NVD

Id
17127  
Name
CVE-2016-0751  
Description
actionpack/lib/action_dispatch/http/mime_type.rb in Action Pack in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 does not properly restrict use of the MIME type cache, which allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP Accept header.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2016-02-15  
Modified Date
2016-12-05  
Seq
2016-0751  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
95040 17127 CVE-2016-0751 FEDORA-2016-94e71ee673  View
95041 17127 CVE-2016-0751 FEDORA-2016-f486068393  View
95042 17127 CVE-2016-0751 SUSE-SU-2016:1146  View
95043 17127 CVE-2016-0751 openSUSE-SU-2016:0363  View
95044 17127 CVE-2016-0751 openSUSE-SU-2016:0372  View
95045 17127 CVE-2016-0751 RHSA-2016:0296  View
95046 17127 CVE-2016-0751 DSA-3464  View
95047 17127 CVE-2016-0751 [oss-security] 20160125 [CVE-2016-0751] Possible Object Leak and Denial of Service attack in Action Pack  View
95048 17127 CVE-2016-0751 81800  View
95049 17127 CVE-2016-0751 [ruby-security-ann] 20160125 [CVE-2016-0751] Possible Object Leak and Denial of Service attack in Action Pack  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
1019 JVNDB-2016-001792 Ruby on Rails の Action Pack の actionpack/lib/action_dispatch/http/mime_type.rb におけるサービス運用妨害 (DoS) の脆弱性 Ruby on Rails の Action Pack の actionpack/lib/action_dispatch/http/mime_type.rb は、MIME タイプのキャッシュの使用を適切に制限しないため、サービス運用妨害 (メモリ消費) 状態にされる脆弱性が存在します。 CVE-2016-0751 86955 CVE-2016-0751 17127 5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001792.html 2016-01-25 2016-03-22 View