CVE-2018-16470 Rack vulnerable to Denial of Service
Attackers can cause excessive CPU consumption via crafted requests, leading to denial of service in applications using the Rack multipart parser.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2018-16470?
CVE-2018-16470 is a high-severity denial of service vulnerability in Rack, published on 13 Nov 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
There is a possible DoS vulnerability in the multipart parser in Rack before 2.0.6. Specially crafted requests can cause the multipart parser to enter a pathological state, causing the parser to use CPU resources disproportionate to the request size.
Weakness: CWE-400
Which versions are affected by CVE-2018-16470?
2 open source packages ship an affected version, including rack. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
rack RubyGems | From 2.0.4 | 2.0.6 |
rack RubyGems | From 2.0.4 | 2.0.6 |
Products include Rack Project Rack.
How do I fix CVE-2018-16470?
Upgrade rack to 2.0.6 or later.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2018-16470 being exploited?
There is no known exploitation of CVE-2018-16470 in the wild and no public exploit code.
Other vulnerabilities in Rack
- CVE-2013-0263 Rack arbitrary code execution via timing attack
- CVE-2013-0183 Rack rubygems receiving excessively long lines triggers out-of-memory error
- CVE-2011-5036 Rack Gem Subject to Denial of Service via Hash Collisions
- CVE-2012-6109 Rack vulnerable to REDoS
- CVE-2013-0184 Rack vulnerable to Denial of Service
Sources
Also known as GHSA-hg78-4f6x-99wq.