CVE-2016-0751

actionpack/lib/action_dispatch/http/mime_type.rb in Action Pack in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and…

published February 16, 2016

CVSS
—
EPSS
10%
Percentile
95.5
In the wild
Unconfirmed
What it is

actionpack/lib/action_dispatch/http/mime_type.rb in Action Pack in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 does not properly restrict use of the MIME type cache, which allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP Accept header.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.09731 · 95.5th percentile
Published
2016-02-16T02:00Z
EPSS history
Timeline
  • 16 FEB 02:00Z
    actionpack/lib/action_dispatch/http/mime_type.rb in Action Pack in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and…
    cvelistv5