CVE-2015-3225

17

FAUCET Score

CVE-2015-3225 is a denial-of-service vulnerability in Rack versions prior to 1.5.4 and 1.6.2, affecting applications like Ruby on Rails 3.x and 4.x, and various Debian and OpenSUSE distributions. An unauthenticated remote attacker can trigger a SystemStackError by submitting a request with a deeply nested parameter, leading to a denial of service. The CVSS score is 5.0 (Medium), indicating network access, low attack complexity, and no confidentiality or integrity impact, but partial availability impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or KEV listing, though it has received some community discussion and media coverage.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		<= 1.5.3CPE matchmatch criteria	cpe:2.3:a:rack_project:rack::::::::
		1.6.0CPE matchmatch criteria	cpe:2.3:a:rack_project:rack:1.6.0:::::::*
		1.6.1CPE matchmatch criteria	cpe:2.3:a:rack_project:rack:1.6.1:::::::*
		13.1CPE matchmatch criteria	cpe:2.3:o:opensuse:opensuse:13.1:::::::*
		13.2CPE matchmatch criteria	cpe:2.3:o:opensuse:opensuse:13.2:::::::*

CVSS Data

CVSS version used by this source: 2.0

5.0MEDIUM

AV:N/AC:L/Au:N/C:N/I:N/A:P

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Exploitability Score

10.0

Impact Score

2.9

CvssVersion

2.0

Exploit Intelligence

EPSS Score

7.78%

Probability of exploitation in next 30 days

EPSS Percentile

94.0%

Percentile rank of EPSS score among Peer Group

As of 2026-07-27

Model: v2026.06.15

This CVE's current EPSS score of 0.0778 is in the 92nd percentile among its peer group of 23,723 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (205)

github_advisorypatch availablevia nvd_reference

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-net-ssh-krb-0:0.4.0-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-unf-0:0.1.3-5.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-unf_ext-0:0.0.6-6.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-unicode-display_width-0:1.0.5-3.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-useragent-0:0.16.8-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-validates_lengths_from_database-0:0.5.0-3.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-webpack-rails-0:0.9.8-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-wicked-0:1.1.0-4.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-will_paginate-0:3.1.5-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-x-editable-rails-0:1.5.5-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: v8-1:3.14.5.10-19.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: yaml-cpp-0:0.5.1-7.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7Fixed in: pcs-0:0.9.143-15.el7

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: createrepo_c-0:0.7.4-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: facter-1:2.4.6-3.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: gofer-0:2.7.7-3.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: hiera-0:1.3.1-2.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: kobo-0:0.5.1-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: libstemmer-0:0-2.585svn.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: libwebsockets-0:2.1.0-3.el7

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: liquibase-0:3.1.0-1.el7

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: mod_xsendfile-0:0.12-10.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: mongodb-0:2.6.11-2.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: ostree-0:2017.1-2.atomic.el7

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: puppet-0:3.8.6-4.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: puppet-agent-0:1.10.9-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: puppet-agent-oauth-0:0.5.1-2.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: puppetlabs-stdlib-0:4.2.1-1.20140510git08b00d9.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: puppetserver-0:2.8.0-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: python-amqp-0:1.4.9-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: python-anyjson-0:0.3.3-5.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: python-billiard-1:3.3.0.20-2.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: python-blinker-0:1.3-2.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: python-celery-0:3.1.17-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: python-crane-0:2.1.0-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: python-django-0:1.6.11-5.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: python-flask-1:0.10.1-4.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: python-fpconst-0:0.7.3-12.el7

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: python-gnupg-0:0.3.7-1.el7ui

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: python-httplib2-0:0.6.0-6.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: python-isodate-0:0.5.0-5.pulp.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: python-itsdangerous-0:0.23-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: python-jinja2-0:2.7.2-2.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: python-kid-0:0.9.6-11.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: python-kombu-1:3.0.33-8.pulp.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: python-mongoengine-0:0.10.5-2.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: python-nectar-0:1.5.4-3.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: python-oauth2-0:1.5.211-8.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: python-okaara-0:1.0.32-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: python-pymongo-0:3.2-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: python-qpid-0:1.35.0-5.el7

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: python-semantic_version-0:2.2.0-6.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: python-simplejson-0:3.2.0-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: python-twisted-core-0:12.2.0-4.el7

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: python-twisted-web-0:12.1.0-5.el7_2

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: python-werkzeug-0:0.9.1-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: python-zope-interface-0:4.0.5-4.el7

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: qpid-cpp-0:1.36.0-9.el7

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: qpid-dispatch-0:0.8.0-16.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: qpid-proton-0:0.16.0-7.el7

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: redhat-access-insights-puppet-0:0.0.9-2.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: repoview-0:0.6.6-4.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: ruby-augeas-0:0.5.0-1.el7

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: rubygem-ansi-0:1.4.3-3.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: rubygem-bundler_ext-0:0.4.1-3.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: rubygem-clamp-0:1.0.0-8.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: rubygem-concurrent-ruby-1:1.0.3-2.fm1_15.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: rubygem-fast_gettext-0:1.1.0-4.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: rubygem-ffi-0:1.4.0-3.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: rubygem-gssapi-0:1.1.2-4.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: rubygem-hashie-0:2.0.5-4.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: rubygem-highline-0:1.6.21-5.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: rubygem-little-plugger-0:1.1.3-21.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: rubygem-logging-0:1.8.2-7.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: rubygem-mime-types-0:1.19-7.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: rubygem-multi_json-0:1.10.1-3.git.1551.b3eae6f.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: rubygem-netrc-0:0.7.7-9.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: rubygem-newt-0:0.9.6-3.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: rubygem-oauth-0:0.5.1-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: rubygem-openscap-0:0.4.7-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: rubygem-passenger-0:4.0.18-23.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: rubygem-powerbar-0:1.0.17-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: rubygem-rack-1:1.6.4-2.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: rubygem-rack-protection-0:1.5.3-3.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: rubygem-rake-0:0.9.2.2-41.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: rubygem-rb-inotify-0:0.9.7-4.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: rubygem-rest-client-0:1.6.7-7.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: rubygem-rkerberos-0:0.1.3-2.2.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: rubygem-rubyipmi-0:0.10.0-2.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: rubygem-sinatra-1:1.4.7-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: rubygem-tilt-0:1.3.7-2.git.0.3b416c9.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: ruby-rgen-0:0.6.5-2.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: ruby-shadow-0:1.4.1-21.el7

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: saslwrapper-0:0.22-5.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: SOAPpy-0:0.11.6-17.el7

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-0:3.2-11.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-activerecord-session_store-0:0.1.2-2.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-addressable-0:2.3.6-4.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-algebrick-0:0.7.3-4.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-ancestry-0:2.2.1-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-anemone-0:0.7.2-14.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-angular-rails-templates-1:1.0.2-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-apipie-bindings-0:0.2.0-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-apipie-params-0:0.0.5-3.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-apipie-rails-0:0.5.6-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-audited-0:4.4.1-2.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-autoparse-0:0.3.3-5.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-awesome_print-0:1.7.0-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-bundler_ext-0:0.4.1-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-clamp-0:1.0.0-8.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-concurrent-ruby-1:1.0.3-1.fm1_15.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-concurrent-ruby-edge-1:0.2.3-1.fm1_15.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-css_parser-0:1.4.7-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-daemons-0:1.2.3-5.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-deacon-0:1.0.0-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-deep_cloneable-0:2.2.2-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-deface-0:1.2.0-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-diffy-0:3.0.1-3.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-docker-api-0:1.28.0-2.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-domain_name-0:0.5.20160310-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-dynflow-0:0.8.34-1.fm1_15.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-excon-0:0.51.0-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-extlib-0:0.9.16-4.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-facter-0:2.4.0-3.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-faraday-0:0.9.1-4.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-fast_gettext-0:1.4.1-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-ffi-0:1.4.0-10.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-fog-0:1.38.0-2.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-fog-aws-0:1.2.0-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-fog-core-0:1.42.0-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-fog-google-0:0.1.0-3.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-fog-json-0:1.0.2-6.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-fog-libvirt-0:0.2.0-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-fog-openstack-0:0.1.18-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-fog-rackspace-0:0.1.4-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-fog-vsphere-0:1.7.0-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-fog-xenserver-0:0.2.3-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-fog-xml-0:0.1.2-4.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-formatador-0:0.2.1-9.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-friendly_id-0:5.1.0-3.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-get_process_mem-0:0.2.1-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-gettext_i18n_rails-0:1.2.1-3.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-git-0:1.2.5-7.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-google-api-client-0:0.8.2-7.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-gssapi-0:1.2.0-3.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-hashie-0:2.0.5-4.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-highline-0:1.7.8-2.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-http-cookie-0:1.0.2-3.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-ipaddress-0:0.8.0-9.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-jgrep-0:1.3.3-8.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-jwt-0:1.2.0-4.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-launchy-0:2.4.3-4.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-ldap_fluff-0:0.4.7-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-little-plugger-0:1.1.3-21.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-locale-0:2.0.9-11.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-logging-0:1.8.2-4.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-multipart-post-0:1.2.0-4.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-net-ldap-0:0.15.0-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-net-ping-0:2.0.1-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-netrc-0:0.7.7-8.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-net-scp-0:1.1.0-7.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-net-ssh-0:4.0.1-2.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-oauth-0:0.5.1-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-parse-cron-0:0.1.4-2.fm1_15.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-passenger-0:4.0.18-23.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-pg-0:0.15.1-3.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-powerbar-0:1.0.17-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-qpid_messaging-0:1.36.0-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-rabl-0:0.12.0-5.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-rack-jsonp-0:1.3.1-5.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-rails-i18n-0:4.0.9-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-rainbow-0:2.2.1-3.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-rbovirt-0:0.1.4-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-rbvmomi-0:1.10.0-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-redhat_access_lib-0:1.1.4-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-responders-0:2.3.0-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-rest-client-0:1.8.0-4.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-retriable-0:1.4.1-4.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-roadie-0:3.2.1-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-roadie-rails-0:1.1.1-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-robotex-0:1.0.0-19.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-ruby2ruby-0:2.1.3-4.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-ruby-libvirt-0:0.5.2-5.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-ruby_parser-0:3.6.3-4.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-runcible-0:1.12.0.3-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-safemode-0:1.3.2-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-scoped_search-0:4.1.2-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-secure_headers-0:3.4.1-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-sequel-0:4.20.0-6.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-sexp_processor-0:4.4.4-3.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-signet-0:0.6.0-5.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-sshkey-0:1.9.0-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.3 for RHEL 7Fixed in: tfm-rubygem-trollop-0:2.1.2-1.el7sat

rubygemspatch availablevia ghsa

Product: rackFixed in: 1.6.2

rubygemspatch availablevia ghsa

Product: rackFixed in: 1.5.4

rubygemspatch availablevia ghsa

Product: rackFixed in: 1.4.6

redhatend of lifevia redhat_api

Product: Red Hat Enterprise MRG 2Fixed in: rubygem-rack

redhatend of lifevia redhat_api

Product: Red Hat OpenShift Enterprise 2Fixed in: rubygem-rack

redhatend of lifevia redhat_api

Product: Red Hat Software CollectionsFixed in: rh-ror41-rubygem-rack

redhatend of lifevia redhat_api

Product: Red Hat Software CollectionsFixed in: ror40-rubygem-rack

redhatend of lifevia redhat_api

Product: Red Hat Software CollectionsFixed in: ruby193-rubygem-rack

redhatend of lifevia redhat_api

Product: Red Hat Subscription Asset ManagerFixed in: rubygem-rack

redhatend of lifevia redhat_api

Product: CloudForms Management Engine 5Fixed in: ruby193-rubygem-rack

redhatend of lifevia redhat_api

Product: OpenStack ForemanFixed in: rubygem-rack

Vendor Advisories (2)

rubygemsGHSA-rgr4-9jh5-j4j6medium

Rack vulnerable to Denial of Service via large parameter depth request

redhatCVE-2015-3225Moderate

rubygem-rack: Potential Denial of Service Vulnerability in Rack normalize_params()

References

lists.fedoraproject.org / pipermail/package-announce/2015-August/164173.html

lists.fedoraproject.org / pipermail/package-announce/2015-August/165180.html

lists.opensuse.org / opensuse-updates/2015-07/msg00040.html

Third Party Advisory

lists.opensuse.org / opensuse-updates/2015-07/msg00043.html

Third Party Advisory

lists.opensuse.org / opensuse-updates/2015-07/msg00044.html

Third Party Advisory

openwall.com / lists/oss-security/2015/06/16/14

Mailing ListThird Party Advisory

rhn.redhat.com / errata/RHSA-2015-2290.html

github.com / rack/rack/blob/master/HISTORY.md

Issue TrackingPatchVendor Advisory

groups.google.com / forum/message/raw

Mailing ListThird Party Advisory

debian.org / security/2015/dsa-3322

securityfocus.com / bid/75232