NVD

Id
41472  
Name
CVE-2013-6414  
Description
actionpack/lib/action_view/lookup_context.rb in Action View in Ruby on Rails 3.x before 3.2.16 and 4.x before 4.0.2 allows remote attackers to cause a denial of service (memory consumption) via a header containing an invalid MIME type that leads to excessive caching.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2013-12-06  
Modified Date
2014-12-11  
Seq
2013-6414  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
209522 41472 CVE-2013-6414 openSUSE-SU-2013:1904  View
209523 41472 CVE-2013-6414 openSUSE-SU-2013:1906  View
209524 41472 CVE-2013-6414 openSUSE-SU-2013:1907  View
209525 41472 CVE-2013-6414 openSUSE-SU-2014:0009  View
209526 41472 CVE-2013-6414 RHSA-2013:1794  View
209527 41472 CVE-2013-6414 RHSA-2014:0008  View
209528 41472 CVE-2013-6414 RHSA-2014:1863  View
209529 41472 CVE-2013-6414 http://weblog.rubyonrails.org/2013/12/3/Rails_3_2_16_and_4_0_2_have_been_released/  View
209530 41472 CVE-2013-6414 DSA-2888  View
209531 41472 CVE-2013-6414 http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/  View
209532 41472 CVE-2013-6414 [ruby-security-ann] 20131203 [CVE-2013-6414] Denial of Service Vulnerability in Action View  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23793 JVNDB-2013-005368 Ruby on Rails の Action View の actionpack/lib/action_view/lookup_context.rb におけるサービス運用妨害 (DoS) の脆弱性 Ruby on Rails の Action View の actionpack/lib/action_view/lookup_context.rb には、サービス運用妨害 (メモリ消費) 状態にされる脆弱性が存在します。 CVE-2013-6414 66356 CVE-2013-6414 41472 5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005368.html 2013-12-03 2015-08-06 View