VulnerableCode Package Details - pkg:rpm/redhat/candlepin@0.7.23-1?arch=el6

Search for packages

Vulnerability	Summary	Fixed by
VCID-64vt-66fw-53dk Aliases: CVE-2013-0184 GHSA-v882-ccj6-jc48 OSV-89327	Rack vulnerable to Denial of Service Unspecified vulnerability in `Rack::Auth::AbstractRequest` in Rack 1.1.x before 1.1.5, 1.2.x before 1.2.7, 1.3.x before 1.3.9, and 1.4.x before 1.4.4 allows remote attackers to cause a denial of service via unknown vectors related to "symbolized arbitrary strings."	There are no reported fixed by versions.
VCID-g23a-fndf-aucp Aliases: CVE-2012-5561	Katello: /etc/katello/secure/passphrase is world readable	There are no reported fixed by versions.
VCID-h6mf-a3pd-d3hb Aliases: CVE-2013-0183 GHSA-3pxh-h8hw-mj8w OSV-89320	Rack rubygems receiving excessively long lines triggers out-of-memory error multipart/parser.rb in Rack 1.3.x before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to cause a denial of service (memory consumption and out-of-memory error) via a long string in a Multipart HTTP packet.	There are no reported fixed by versions.
VCID-ngv1-73vp-mbac Aliases: CVE-2013-0162 GHSA-8mvw-22r7-w6fq OSV-90561	ruby_parser allows local users to overwrite arbitrary files via symlink attack on temporary file with predictable name The `diff_pp` function in `lib/gauntlet_rubyparser.rb` in the ruby_parser gem 3.1.1 and earlier for Ruby allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in `/tmp`.	There are no reported fixed by versions.
VCID-ts7r-dady-tua3 Aliases: CVE-2012-6109 GHSA-h77x-m5q8-c29h OSV-89317	Rack vulnerable to REDoS `lib/rack/multipart.rb` in Rack before 1.1.4, 1.2.x before 1.2.6, 1.3.x before 1.3.7, and 1.4.x before 1.4.2 uses an incorrect regular expression, which allows remote attackers to cause a denial of service (infinite loop) via a crafted Content-Disposion header.	There are no reported fixed by versions.
VCID-wcj5-srv6-rbbg Aliases: CVE-2012-5603	Katello: lack of authorization in proxies_controller.rb	There are no reported fixed by versions.

Vulnerability

Summary

Fixed by

VCID-64vt-66fw-53dk
Aliases:
CVE-2013-0184
GHSA-v882-ccj6-jc48
OSV-89327

Rack vulnerable to Denial of Service Unspecified vulnerability in `Rack::Auth::AbstractRequest` in Rack 1.1.x before 1.1.5, 1.2.x before 1.2.7, 1.3.x before 1.3.9, and 1.4.x before 1.4.4 allows remote attackers to cause a denial of service via unknown vectors related to "symbolized arbitrary strings."