CVE-2016-0751

CVE-2016-0751 is a denial-of-service vulnerability affecting Action Pack in Ruby on Rails versions before 3.2.22.1, 4.1.14.1, 4.2.5.1, and 5.0.0.beta1.1. An attacker can exploit this by sending a crafted HTTP Accept header, leading to excessive memory consumption. With a CVSS score of 7.5 (High), this vulnerability is easily exploitable over the network with low attack complexity and no user interaction, resulting in a high impact on availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.