Vulnerability Details CVE-2023-27539
There is a denial of service vulnerability in the header parsing component of Rack.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 43.5%
CVSS Severity
CVSS v3 Score 5.3
References
- https://discuss.rubyonrails.org/t/cve-2023-27539-possible-denial-of-service-vulnerability-in-racks-header-parsing/82466
- https://github.com/advisories/GHSA-c6qg-cjj8-47qp
- https://github.com/rack/rack/commit/231ef369ad0b542575fb36c74fcfcfabcf6c530c
- https://github.com/rack/rack/commit/ee7919ea04303717858be1c3f16b406adc6d8cff
- https://lists.debian.org/debian-lts-announce/2023/04/msg00017.html
- https://security.netapp.com/advisory/ntap-20231208-0016/
- https://www.debian.org/security/2023/dsa-5530
Products affected by CVE-2023-27539
-
cpe:2.3:a:rack:rack:2.0.0
-
cpe:2.3:a:rack:rack:2.0.1
-
cpe:2.3:a:rack:rack:2.0.2
-
cpe:2.3:a:rack:rack:2.0.3
-
cpe:2.3:a:rack:rack:2.0.4
-
cpe:2.3:a:rack:rack:2.0.5
-
cpe:2.3:a:rack:rack:2.0.6
-
cpe:2.3:a:rack:rack:2.0.7
-
cpe:2.3:a:rack:rack:2.0.8
-
cpe:2.3:a:rack:rack:2.0.9
-
cpe:2.3:a:rack:rack:2.0.9.2
-
cpe:2.3:a:rack:rack:2.0.9.3
-
cpe:2.3:a:rack:rack:2.1.0
-
cpe:2.3:a:rack:rack:2.1.1
-
cpe:2.3:a:rack:rack:2.1.2
-
cpe:2.3:a:rack:rack:2.1.3
-
cpe:2.3:a:rack:rack:2.1.4
-
cpe:2.3:a:rack:rack:2.1.4.2
-
cpe:2.3:a:rack:rack:2.1.4.3
-
cpe:2.3:a:rack:rack:2.2.0
-
cpe:2.3:a:rack:rack:2.2.1
-
cpe:2.3:a:rack:rack:2.2.2
-
cpe:2.3:a:rack:rack:2.2.3
-
cpe:2.3:a:rack:rack:2.2.4
-
cpe:2.3:a:rack:rack:2.2.4.1
-
cpe:2.3:a:rack:rack:2.2.5
-
cpe:2.3:a:rack:rack:2.2.6
-
cpe:2.3:a:rack:rack:2.2.6.1
-
cpe:2.3:a:rack:rack:2.2.6.2
-
cpe:2.3:a:rack:rack:2.2.6.3
-
cpe:2.3:a:rack:rack:3.0.0
-
cpe:2.3:a:rack:rack:3.0.1
-
cpe:2.3:a:rack:rack:3.0.2
-
cpe:2.3:a:rack:rack:3.0.3
-
cpe:2.3:a:rack:rack:3.0.4
-
cpe:2.3:a:rack:rack:3.0.4.1
-
cpe:2.3:a:rack:rack:3.0.4.2
-
cpe:2.3:a:rack:rack:3.0.5
-
cpe:2.3:a:rack:rack:3.0.6
-
cpe:2.3:o:debian:debian_linux:10.0
-
cpe:2.3:o:debian:debian_linux:11.0