Description
The read_multipart function in cgi.rb in Ruby before 1.8.5-p2 does not properly detect boundaries in MIME multipart content, which allows remote attackers to cause a denial of service (infinite loop) via crafted HTTP requests, a different issue than CVE-2006-5467.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | irb +6 | 1.8.1-7.EL4.8.1 | RHSA-2007:0961 |
| RHEL 3 | irb +6 | 1.6.8-12.el3 | RHSA-2008:0562 |
| RHEL 2 | irb +5 | 1.6.4-6.el2 | RHSA-2008:0562 |
Advisories 2
- RHSA-2008:0562 Red Hat Security Advisory: ruby security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2007:0961 Red Hat Security Advisory: ruby security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- http://docs.info.apple.com/article.html?artnum=305530
- USN-394-1 vendor-advisory
- 31090 third-party-advisory
- 27576 third-party-advisory
- ADV-2007-1939 vdb-entry
- JVN#84798830 third-party-advisory
- 23268 third-party-advisory
- APPLE-SA-2007-05-24 vendor-advisory
- http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=218287
- http://www.ruby-lang.org/en/news/2006/12/04/another-dos-vulnerability-in-cgi-library/
- 25402 third-party-advisory
- 23165 third-party-advisory
- RHSA-2007:0961 vendor-advisory
- oval:org.mitre.oval:def:10529 vdb-entry signature
- ruby-cgi-library-dos(30734) vdb-entry
- 1017363 vdb-entry
- SUSE-SR:2007:004 vendor-advisory
- http://bugs.gentoo.org/show_bug.cgi?id=157048
- http://www.ruby-lang.org/cgi-bin/cvsweb.cgi/ruby/lib/cgi.rb.diff?f=h&only_with_tag=MAIN&r1=text&tr1=1.92&r2=text&tr2=1.91
- ADV-2006-4855 vdb-entry
- MDKSA-2006:225 vendor-advisory
- GLSA-200612-21 vendor-advisory
- 23454 third-party-advisory
- 21441 vdb-entry