5
CVSSv2

CVE-2013-6414

Published: 07/12/2013 Updated: 08/08/2019
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 540
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

actionpack/lib/action_view/lookup_context.rb in Action View in Ruby on Rails 3.x prior to 3.2.16 and 4.x prior to 4.0.2 allows remote malicious users to cause a denial of service (memory consumption) via a header containing an invalid MIME type that leads to excessive caching.

Vulnerable Product Search on Vulmon Subscribe to Product

rubyonrails rails 4.0.0

rubyonrails rails 4.0.1

rubyonrails rails

rubyonrails rails 3.2.8

rubyonrails rails 3.2.7

rubyonrails rails 3.2.6

rubyonrails rails 3.2.5

rubyonrails rails 3.2.4

rubyonrails ruby on rails 3.2.15

rubyonrails rails 3.2.13

rubyonrails rails 3.2.12

rubyonrails rails 3.1.8

rubyonrails rails 3.1.7

rubyonrails rails 3.1.2

rubyonrails rails 3.1.1

rubyonrails rails 3.1.0

rubyonrails rails 3.0.8

rubyonrails rails 3.0.6

rubyonrails rails 3.0.20

rubyonrails rails 3.0.2

rubyonrails rails 3.0.13

rubyonrails rails 3.0.1

rubyonrails rails 3.2.2

rubyonrails rails 3.2.0

rubyonrails rails 3.1.9

rubyonrails rails 3.1.4

rubyonrails rails 3.1.3

rubyonrails rails 3.0.9

rubyonrails rails 3.0.7

rubyonrails ruby on rails 3.0.4

rubyonrails rails 3.0.3

rubyonrails rails 3.0.16

rubyonrails rails 3.0.14

rubyonrails rails 3.0.10

rubyonrails rails 3.0.0

rubyonrails rails 3.2.3

rubyonrails ruby on rails

rubyonrails ruby on rails 3.2.14

rubyonrails rails 3.2.11

rubyonrails rails 3.2.10

rubyonrails rails 3.1.6

rubyonrails rails 3.1.5

rubyonrails ruby on rails 3.1.11

rubyonrails rails 3.0.5

rubyonrails rails 3.0.19

rubyonrails rails 3.0.12

rubyonrails rails 3.2.9

rubyonrails rails 3.2.1

rubyonrails rails 3.1.10

rubyonrails rails 3.0.4

rubyonrails rails 3.0.18

rubyonrails rails 3.0.17

rubyonrails rails 3.0.11

Vendor Advisories

Synopsis Important: ruby193-rubygem-actionpack security update Type/Severity Security Advisory: Important Topic Updated ruby193-rubygem-actionpack packages that fix multiple securityissues are now available for Red Hat OpenStack 30The Red Hat Security Response Team has rated this update as havingimportant ...
Synopsis Important: ruby193-rubygem-actionpack security update Type/Severity Security Advisory: Important Topic Updated ruby193-rubygem-actionpack packages that fix multiple securityissues are now available for Red Hat Software Collections 1The Red Hat Security Response Team has rated this update as having ...
Debian Bug report logs - #731288 ruby-actionpack-32: multiple vulnerabilities [CVE-2013-6414 CVE-2013-4491 CVE-2013-6415 CVE-2013-6417 CVE-2013-6416] Package: ruby-actionpack-32; Maintainer for ruby-actionpack-32 is (unknown); Reported by: Antonio Terceiro <terceiro@debianorg> Date: Wed, 4 Dec 2013 01:09:01 UTC Severi ...
Debian Bug report logs - #731290 ruby-actionpack-40: multiple vulnerabilities [CVE-2013-6414 CVE-2013-4491 CVE-2013-6415 CVE-2013-6417 CVE-2013-6416] Package: ruby-actionpack-40; Maintainer for ruby-actionpack-40 is (unknown); Reported by: Antonio Terceiro <terceiro@debianorg> Date: Wed, 4 Dec 2013 01:09:01 UTC Severi ...
A denial of service flaw was found in the header handling component of Action View A remote attacker could send strings in specially crafted headers that would be cached indefinitely, which would result in all available system memory eventually being consumed ...