USN-6689-1: Rack vulnerabilities
It was discovered that Rack incorrectly parse some headers. An attacker could possibly use this issue to cause a denial of service. (CVE-2023-27539, CVE-2024-26141, CVE-2024-26146)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/ruby-rackto a version that resolves this vulnerability.Fixed in 2.2.4-3ubuntu0.1
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the severity of USN-6689-1?
The severity of USN-6689-1 is associated with the potential for denial of service due to improper header parsing in Rack.
How do I fix USN-6689-1?
To fix USN-6689-1, update the ruby-rack package to version 2.2.4-3ubuntu0.1 or later on your Ubuntu 23.10 system.
What vulnerabilities are addressed in USN-6689-1?
USN-6689-1 addresses multiple vulnerabilities including CVE-2023-27539, CVE-2024-26141, and CVE-2024-26146.
Which software is affected by USN-6689-1?
USN-6689-1 affects the ruby-rack package on Ubuntu version 23.10.
Can USN-6689-1 lead to exploitation?
Yes, if exploited, USN-6689-1 could allow an attacker to cause a denial of service.