7.5

CVSS Score

3.0

Basic Information

CVE ID

CVE-2018-16470

GHSA ID

GHSA-hg78-4f6x-99wq

EPSS Score

0.39838%

CWE

CWE-400

Published

11/15/2018

Updated

11/4/2023

KEV Status

Technology

Ruby

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2018-16470

CVE-2018-16470: Rack vulnerable to Denial of Service

There is a possible DoS vulnerability in the multipart parser in Rack before 2.0.6. Specially crafted requests can cause the multipart parser to enter a pathological state, causing the parser to use CPU resources disproportionate to the request size.

(GitHub Advisory)

7.5

CVSS Score

3.0

Basic Information

CVE ID

CVE-2018-16470

GHSA ID

GHSA-hg78-4f6x-99wq

EPSS Score

0.39838%

CWE

CWE-400

Published

11/15/2018

Updated

11/4/2023

KEV Status

Technology

Ruby

Technical Details

CVSS Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
rack	rubygems	>= 2.0.4, < 2.0.6	2.0.6

Vulnerability Intelligence
Miggo AI

Root Cause Analysis:

In progress

WAF Protection Rules

WAF Rule

T**r* is * possi*l* *oS vuln*r**ility in t** multip*rt p*rs*r in R**k ***or* *.*.*. Sp**i*lly *r**t** r*qu*sts **n **us* t** multip*rt p*rs*r to *nt*r * p*t*olo*i**l st*t*, **usin* t** p*rs*r to us* *PU r*sour**s *isproportion*t* to t** r*qu*st siz*.

Reasoning

No *n*lysis *v*il**l*

7.5

Basic Information

Concerned about an active attack path?

CVE-2018-16470: Rack vulnerable to Denial of Service

7.5

Basic Information

Technical Details

Vulnerability IntelligenceMiggo AI

WAF Protection Rules

WAF Rule

Reasoning

Vulnerability Intelligence
Miggo AI