Summary
It was discovered that Rack was not properly parsing data when processing
multipart POST requests. If a user or automated system were tricked into
sending a specially crafted multipart POST request to an application using
Rack, a remote attacker could possibly use this issue to cause a denial of
service. (CVE-2022-30122)
It was discovered that Rack was not properly escaping untrusted data when
performing logging operations, which could cause shell escaped sequences
to be written to a terminal. If a user or automated system were tricked
into sending a specially crafted request to an application using Rack, a
remote attacker could possibly use this issue to execute arbitrary code in
the machine running the application. (CVE-2022-30123)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | ruby-rack | 1.6.4-4ubuntu0.2+esm2 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | ruby-rack | 2.0.7-2ubuntu0.1+esm2 |
| Ubuntu · Pro 22.04 LTS Pro:22.04:LTS | ruby-rack | 2.1.4-5ubuntu1+esm2 |
Vulnerabilities 2
-
Critical 10.0
Possible shell escape sequence injection vulnerability in Rack
A sequence injection vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 which could allow is a possible shell escape in the Lint and CommonLogger components of Rack.
-
High 7.5
Denial of Service Vulnerability in Rack Multipart Parsing
A possible denial of service vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 in the multipart parsing component of Rack.