5
CVE-2013-6414
- EPSS 20.7%
- Veröffentlicht 07.12.2013 00:55:03
- Zuletzt bearbeitet 29.04.2026 01:13:23
- Erkennungen
Loginactionpack/lib/action_view/lookup_context.rb in Action View in Ruby on Rails 3.x before 3.2.16 and 4.x before 4.0.2 allows remote attackers to cause a denial of service (memory consumption) via a header containing an invalid MIME type that leads to excessive caching.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Rubyonrails ≫ Rails Update - Version <= 4.0.1
Rubyonrails ≫ Rails Version 4.0.0 Update -
Rubyonrails ≫ Rails Version 4.0.0 Update beta
Rubyonrails ≫ Rails Version 4.0.0 Update rc1
Rubyonrails ≫ Rails Version 4.0.0 Update rc2
Rubyonrails ≫ Rails Version 4.0.1 Update rc1
Rubyonrails ≫ Rails Version 3.0.0
Rubyonrails ≫ Rails Version 3.0.0 Update beta
Rubyonrails ≫ Rails Version 3.0.0 Update beta2
Rubyonrails ≫ Rails Version 3.0.0 Update beta3
Rubyonrails ≫ Rails Version 3.0.0 Update beta4
Rubyonrails ≫ Rails Version 3.0.0 Update rc
Rubyonrails ≫ Rails Version 3.0.0 Update rc2
Rubyonrails ≫ Rails Version 3.0.1
Rubyonrails ≫ Rails Version 3.0.1 Update pre
Rubyonrails ≫ Rails Version 3.0.2
Rubyonrails ≫ Rails Version 3.0.2 Update pre
Rubyonrails ≫ Rails Version 3.0.3
Rubyonrails ≫ Rails Version 3.0.4 Update rc1
Rubyonrails ≫ Rails Version 3.0.5
Rubyonrails ≫ Rails Version 3.0.5 Update rc1
Rubyonrails ≫ Rails Version 3.0.6
Rubyonrails ≫ Rails Version 3.0.6 Update rc1
Rubyonrails ≫ Rails Version 3.0.6 Update rc2
Rubyonrails ≫ Rails Version 3.0.7
Rubyonrails ≫ Rails Version 3.0.7 Update rc1
Rubyonrails ≫ Rails Version 3.0.7 Update rc2
Rubyonrails ≫ Rails Version 3.0.8
Rubyonrails ≫ Rails Version 3.0.8 Update rc1
Rubyonrails ≫ Rails Version 3.0.8 Update rc2
Rubyonrails ≫ Rails Version 3.0.8 Update rc3
Rubyonrails ≫ Rails Version 3.0.8 Update rc4
Rubyonrails ≫ Rails Version 3.0.9
Rubyonrails ≫ Rails Version 3.0.9 Update rc1
Rubyonrails ≫ Rails Version 3.0.9 Update rc2
Rubyonrails ≫ Rails Version 3.0.9 Update rc3
Rubyonrails ≫ Rails Version 3.0.9 Update rc4
Rubyonrails ≫ Rails Version 3.0.9 Update rc5
Rubyonrails ≫ Rails Version 3.0.10
Rubyonrails ≫ Rails Version 3.0.10 Update rc1
Rubyonrails ≫ Rails Version 3.0.11
Rubyonrails ≫ Rails Version 3.0.12
Rubyonrails ≫ Rails Version 3.0.12 Update rc1
Rubyonrails ≫ Rails Version 3.0.13
Rubyonrails ≫ Rails Version 3.0.13 Update rc1
Rubyonrails ≫ Rails Version 3.0.14
Rubyonrails ≫ Rails Version 3.0.16
Rubyonrails ≫ Rails Version 3.0.17
Rubyonrails ≫ Rails Version 3.0.18
Rubyonrails ≫ Rails Version 3.0.19
Rubyonrails ≫ Rails Version 3.0.20
Rubyonrails ≫ Rails Version 3.1.0
Rubyonrails ≫ Rails Version 3.1.0 Update beta1
Rubyonrails ≫ Rails Version 3.1.0 Update rc1
Rubyonrails ≫ Rails Version 3.1.0 Update rc2
Rubyonrails ≫ Rails Version 3.1.0 Update rc3
Rubyonrails ≫ Rails Version 3.1.0 Update rc4
Rubyonrails ≫ Rails Version 3.1.0 Update rc5
Rubyonrails ≫ Rails Version 3.1.0 Update rc6
Rubyonrails ≫ Rails Version 3.1.0 Update rc7
Rubyonrails ≫ Rails Version 3.1.0 Update rc8
Rubyonrails ≫ Rails Version 3.1.1
Rubyonrails ≫ Rails Version 3.1.1 Update rc1
Rubyonrails ≫ Rails Version 3.1.1 Update rc2
Rubyonrails ≫ Rails Version 3.1.1 Update rc3
Rubyonrails ≫ Rails Version 3.1.2
Rubyonrails ≫ Rails Version 3.1.2 Update rc1
Rubyonrails ≫ Rails Version 3.1.2 Update rc2
Rubyonrails ≫ Rails Version 3.1.3
Rubyonrails ≫ Rails Version 3.1.4
Rubyonrails ≫ Rails Version 3.1.4 Update rc1
Rubyonrails ≫ Rails Version 3.1.5
Rubyonrails ≫ Rails Version 3.1.5 Update rc1
Rubyonrails ≫ Rails Version 3.1.6
Rubyonrails ≫ Rails Version 3.1.7
Rubyonrails ≫ Rails Version 3.1.8
Rubyonrails ≫ Rails Version 3.1.9
Rubyonrails ≫ Rails Version 3.1.10
Rubyonrails ≫ Rails Version 3.2.0
Rubyonrails ≫ Rails Version 3.2.0 Update rc1
Rubyonrails ≫ Rails Version 3.2.0 Update rc2
Rubyonrails ≫ Rails Version 3.2.1
Rubyonrails ≫ Rails Version 3.2.2
Rubyonrails ≫ Rails Version 3.2.2 Update rc1
Rubyonrails ≫ Rails Version 3.2.3
Rubyonrails ≫ Rails Version 3.2.3 Update rc1
Rubyonrails ≫ Rails Version 3.2.3 Update rc2
Rubyonrails ≫ Rails Version 3.2.4
Rubyonrails ≫ Rails Version 3.2.4 Update rc1
Rubyonrails ≫ Rails Version 3.2.5
Rubyonrails ≫ Rails Version 3.2.6
Rubyonrails ≫ Rails Version 3.2.7
Rubyonrails ≫ Rails Version 3.2.8
Rubyonrails ≫ Rails Version 3.2.9
Rubyonrails ≫ Rails Version 3.2.10
Rubyonrails ≫ Rails Version 3.2.11
Rubyonrails ≫ Rails Version 3.2.12
Rubyonrails ≫ Rails Version 3.2.13
Rubyonrails ≫ Rails Version 3.2.13 Update rc1
Rubyonrails ≫ Rails Version 3.2.13 Update rc2
Rubyonrails ≫ Ruby On Rails Version <= 3.2.15
Rubyonrails ≫ Ruby On Rails Version 3.0.4
Rubyonrails ≫ Ruby On Rails Version 3.1.11
Rubyonrails ≫ Ruby On Rails Version 3.2.14
Rubyonrails ≫ Ruby On Rails Version 3.2.14 Update rc1
Rubyonrails ≫ Ruby On Rails Version 3.2.14 Update rc2
Rubyonrails ≫ Ruby On Rails Version 3.2.15 Update rc1
Rubyonrails ≫ Ruby On Rails Version 3.2.15 Update rc2
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 20.7% | 0.972 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:N/I:N/A:P
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
http://lists.opensuse.org/opensuse-updates/2013-12/msg00079.html
http://lists.opensuse.org/opensuse-updates/2013-12/msg00081.html
http://lists.opensuse.org/opensuse-updates/2013-12/msg00082.html
http://lists.opensuse.org/opensuse-updates/2014-01/msg00003.html
http://rhn.redhat.com/errata/RHSA-2014-1863.html
http://www.debian.org/security/2014/dsa-2888
http://rhn.redhat.com/errata/RHSA-2013-1794.html
http://rhn.redhat.com/errata/RHSA-2014-0008.html
http://secunia.com/advisories/57836
http://weblog.rubyonrails.org/2013/12/3/Rails_3_2_16_and_4_0_2_have_been_released/
http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/
https://groups.google.com/forum/message/raw?msg=ruby-security-ann/A-ebV4WxzKg/KNPTbX8XAQUJ
https://puppet.com/security/cve/cve-2013-6414