Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
multipart/parser.rb in Rack 1.3.x before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to cause a denial of service (memory consumption and out-of-memory error) via a long string in a Multipart HTTP packet.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Rack 缓冲区错误漏洞
Vulnerability Description
Rack是模块化的Ruby Web服务器界面。 Rack 1.3.8之前的1.3.x版本和1.4.3之前的1.4.x版本存在缓冲区错误漏洞。通过Multipart HTTP报文中较长的字符串,远程攻击者利用该漏洞导致拒绝服务(内存耗尽和内存不足错误)。
CVSS Information
N/A
Vulnerability Type
N/A