CVE-2014-0082
Fixed in a distro release EPSS 6%
actionpack/lib/action_view/template/text.rb in Action View in Ruby on Rails 3.x before 3.2.17 converts MIME type strings to symbols during use of the :text option to the render method, which allows remote attackers to cause a denial of service (memory consumption) by including these strings in headers.
Products: rubyonrails rails, rubyonrails ruby_on_rails
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| RubyGems | actionpack | 3.2.17 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | rails | 2.3.14.1 |
| Debian 13 | rails | 2.3.14.1 |
| Debian 14 | rails | 2.3.14.1 |
| Debian 7 | ruby-actionpack-3.2 | 3.2.6-6+deb7u2 |
| Red Hat cloudforms managementengine 5 | cfme | 0:5.2.2.3-1.el6cf |
| Red Hat cloudforms managementengine 5 | cfme-appliance | 0:5.2.2.3-1.el6cf |
| Red Hat cloudforms managementengine 5 | cfme-debuginfo | 0:5.2.2.3-1.el6cf |
| Red Hat cloudforms managementengine 5 | cfme-lib | 0:5.2.2.3-1.el6cf |
| Red Hat cloudforms managementengine 5 | mingw32-cfme-host | 0:5.2.2.3-1.el6cf |
| Red Hat cloudforms managementengine 5 | ruby193-ruby | 0:1.9.3.448-40.1.el6 |
| Red Hat cloudforms managementengine 5 | ruby193-ruby-debuginfo | 0:1.9.3.448-40.1.el6 |
| Red Hat cloudforms managementengine 5 | ruby193-ruby-devel | 0:1.9.3.448-40.1.el6 |
| Red Hat cloudforms managementengine 5 | ruby193-ruby-irb | 0:1.9.3.448-40.1.el6 |
| Red Hat cloudforms managementengine 5 | ruby193-ruby-libs | 0:1.9.3.448-40.1.el6 |
| Red Hat cloudforms managementengine 5 | ruby193-ruby-tcltk | 0:1.9.3.448-40.1.el6 |
| Red Hat cloudforms managementengine 5 | ruby193-rubygem-actionpack | 1:3.2.13-5.el6cf |
| Red Hat cloudforms managementengine 5 | ruby193-rubygem-amq-protocol | 0:1.9.2-3.el6cf |
| Red Hat cloudforms managementengine 5 | ruby193-rubygem-amq-protocol-doc | 0:1.9.2-3.el6cf |
| Red Hat cloudforms managementengine 5 | ruby193-rubygem-bigdecimal | 0:1.1.0-40.1.el6 |
| Red Hat cloudforms managementengine 5 | ruby193-rubygem-bunny | 0:1.0.7-1.el6cf |
| Red Hat cloudforms managementengine 5 | ruby193-rubygem-bunny-doc | 0:1.0.7-1.el6cf |
| Red Hat cloudforms managementengine 5 | ruby193-rubygem-excon | 0:0.31.0-1.el6cf |
| Red Hat cloudforms managementengine 5 | ruby193-rubygem-fog | 0:1.19.0-1.el6cf |
| Red Hat cloudforms managementengine 5 | ruby193-rubygem-io-console | 0:0.3-40.1.el6 |
| Red Hat cloudforms managementengine 5 | ruby193-rubygem-linux_admin | 0:0.7.0-1.el6cf |
| Red Hat cloudforms managementengine 5 | ruby193-rubygem-more_core_extensions | 0:1.1.2-1.el6cf |
| Red Hat cloudforms managementengine 5 | ruby193-rubygem-nokogiri | 0:1.5.6-3.el6cf |
| Red Hat cloudforms managementengine 5 | ruby193-rubygem-nokogiri-debuginfo | 0:1.5.6-3.el6cf |
| Red Hat cloudforms managementengine 5 | ruby193-rubygems | 0:1.8.23-40.1.el6 |
| Red Hat cloudforms managementengine 5 | ruby193-rubygems-devel | 0:1.8.23-40.1.el6 |
| Red Hat rhel software collections 1 | ruby193-rubygem-actionpack | 1:3.2.8-5.3.el6 |
| Red Hat rhel software collections 1 | ruby193-rubygem-actionpack-doc | 1:3.2.8-5.3.el6 |