NVD

Id
28109  
Name
CVE-2015-7581  
Description
actionpack/lib/action_dispatch/routing/route_set.rb in Action Pack in Ruby on Rails 4.x before 4.2.5.1 and 5.x before 5.0.0.beta1.1 allows remote attackers to cause a denial of service (superfluous caching and memory consumption) by leveraging an application"s use of a wildcard controller route.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2016-02-15  
Modified Date
2016-12-05  
Seq
2015-7581  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
147784 28109 CVE-2015-7581 FEDORA-2016-94e71ee673  View
147785 28109 CVE-2015-7581 FEDORA-2016-f486068393  View
147786 28109 CVE-2015-7581 SUSE-SU-2016:1146  View
147787 28109 CVE-2015-7581 openSUSE-SU-2016:0372  View
147788 28109 CVE-2015-7581 RHSA-2016:0296  View
147789 28109 CVE-2015-7581 DSA-3464  View
147790 28109 CVE-2015-7581 [oss-security] 20160125 [CVE-2015-7581] Object leak vulnerability for wildcard controller routes in Action Pack  View
147791 28109 CVE-2015-7581 81677  View
147792 28109 CVE-2015-7581 [ruby-security-ann] 20160125 [CVE-2015-7581] Object leak vulnerability for wildcard controller routes in Action Pack  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11664 JVNDB-2015-006984 Ruby on Rails の Action Pack の actionpack/lib/action_dispatch/routing/route_set.rb におけるサービス運用妨害 (DoS) の脆弱性 Ruby on Rails の Action Pack の actionpack/lib/action_dispatch/routing/route_set.rb には、サービス運用妨害 (余分なキャッシュおよびメモリ消費) 状態にされる脆弱性が存在します。 CVE-2015-7581 84806 CVE-2015-7581 28109 5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006984.html 2015-08-21 2016-03-14 View