CVE-2013-0184

Aliases:DEBIAN-CVE-2013-0184
Advisory lineage Upstream: 0 Downstream: 3
Modified
Published: 01 Mar 2013, 02:00
Last modified:06 Aug 2024, 14:18

Vulnerability Summary

Overall Risk (default)
low
18/100
CVSS Score
4.3 MEDIUM
v2.0 (nvd)
EPSS Score
2.42% LOW
2% probability +1.74%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

01 Mar 2013, 02:00
Published
Vulnerability first disclosed
06 Aug 2024, 14:18
Last Modified
Vulnerability information updated

Description

Unspecified vulnerability in Rack::Auth::AbstractRequest in Rack 1.1.x before 1.1.5, 1.2.x before 1.2.7, 1.3.x before 1.3.9, and 1.4.x before 1.4.4 allows remote attackers to cause a denial of service via unknown vectors related to "symbolized arbitrary strings."

CVSS Metrics

  • v2.0•MEDIUM•Score: 4.3AV:N/AC:M/Au:N/C:N/I:N/A:P

EPSS Trends

Current EPSS score: 2.42%• Percentile: 83%

Affected Systems

  • debian•ruby-rack

    < 1.4.1-2.1 | < 1.4.1-2.1 | < 1.4.1-2.1 | < 1.4.1-2.1

  • rack_project•rack

    1.1.0 | 1.1.2 | 1.1.3 | 1.1.4 | 1.2.0 | 1.2.1 | 1.2.2 | 1.2.3 | 1.2.4 | 1.2.6 | 1.3.0 | 1.3.1 | 1.3.2 | 1.3.3 | 1.3.4 | 1.3.5 | 1.3.6 | 1.3.7 | 1.3.8 | 1.4.0 | 1.4.1 | 1.4.2 | 1.4.3

References (6)