NetSight
IP …
high7.5

CVE-2019-5419

There is a possible denial of service vulnerability in Action View (Rails) <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 where specially crafted accept headers can c…

Impact

There is a possible denial of service vulnerability in Action View (Rails) <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 where specially crafted accept headers can cause action view to consume 100% cpu and make the server unresponsive.

Affected products

VendorProductAffected versions
RubyonrailsRails
before 4.2.11.1
from 5.0.0 before 5.0.7.2
from 5.1.0 before 5.1.6.2
from 5.2.0 before 5.2.2.1
DebianDebian Linux
Version 8.0
RedhatCloudforms
Versions 4.6, 4.7
RedhatSoftware Collections
Version 1.0
OpensuseLeap
Versions 15.0, 15.1
FedoraprojectFedora
Version 30

Weakness classification

CWE-400CWE-770

References