NVD

Id
25116  
Name
CVE-2015-3225  
Description
lib/rack/utils.rb in Rack before 1.5.4 and 1.6.x before 1.6.2, as used with Ruby on Rails 3.x and 4.x and other products, allows remote attackers to cause a denial of service (SystemStackError) via a request with a large parameter depth.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2015-07-26  
Modified Date
2016-12-23  
Seq
2015-3225  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
132803 25116 CVE-2015-3225 FEDORA-2015-12978  View
132804 25116 CVE-2015-3225 FEDORA-2015-12979  View
132805 25116 CVE-2015-3225 openSUSE-SU-2015:1259  View
132806 25116 CVE-2015-3225 openSUSE-SU-2015:1262  View
132807 25116 CVE-2015-3225 openSUSE-SU-2015:1263  View
132808 25116 CVE-2015-3225 [oss-security] 20150616 [CVE-2015-3225] Potential Denial of Service Vulnerability in Rack  View
132809 25116 CVE-2015-3225 RHSA-2015:2290  View
132810 25116 CVE-2015-3225 DSA-3322  View
132811 25116 CVE-2015-3225 75232  View
132812 25116 CVE-2015-3225 https://github.com/rack/rack/blob/master/HISTORY.md  View
132813 25116 CVE-2015-3225 [rubyonrails-security] 20150616 [CVE-2015-3225] Potential Denial of Service Vulnerability in Rack  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
8619 JVNDB-2015-003939 Ruby on Rails などの製品で使用される Rack の lib/rack/utils.rb におけるサービス運用妨害 (DoS) の脆弱性 Ruby on Rails およびその他の製品で使用される Rack の lib/rack/utils.rb には、サービス運用妨害 (SystemStackError) 状態にされる脆弱性が存在します。 CVE-2015-3225 80450 CVE-2015-3225 25116 5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-003939.html 2015-06-16 2015-07-28 View