CVE-2015-3225

lib/rack/utils.rb in Rack before 1.5.4 and 1.6.x before 1.6.2, as used with Ruby on Rails 3.x and 4.x and other products, allows remote attackers to cause a denial of service (SystemStackError) via a request with a large parameter depth.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:rack_project:rack:*:*:*:*:*:*:*:*
cpe:2.3:a:rack_project:rack:1.6.0:*:*:*:*:*:*:*
cpe:2.3:a:rack_project:rack:1.6.1:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*

Configuration 3 (hide)

OR cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

History

No history.

Information

Published : 2015-07-26 22:59

Updated : 2024-02-04 18:53


NVD link : CVE-2015-3225

Mitre link : CVE-2015-3225

CVE.ORG link : CVE-2015-3225


JSON object : View

Products Affected

debian

  • debian_linux

rack_project

  • rack

opensuse

  • opensuse
CWE
CWE-19

Data Processing Errors