Contents

---
gem: rack
cve: 2015-3225
url: https://groups.google.com/forum/#!topic/ruby-security-ann/gcUbICUmKMc
title: |
  Potential Denial of Service Vulnerability in Rack
date: 2015-06-16

description: |
  Carefully crafted requests can cause a `SystemStackError` and potentially 
  cause a denial of service attack. 

  All users running an affected release should upgrade. 

patched_versions:
  - ">= 1.6.2"
  - "~> 1.5.4"
  - "~> 1.4.6"

Version data entries

6 entries across 6 versions & 2 rubygems

Version	Path
bundler-audit-0.7.0.1	data/ruby-advisory-db/gems/rack/CVE-2015-3225.yml
bundler-budit-0.6.2	data/ruby-advisory-db/gems/rack/CVE-2015-3225.yml
bundler-budit-0.6.1	data/ruby-advisory-db/gems/rack/CVE-2015-3225.yml
bundler-audit-0.6.1	data/ruby-advisory-db/gems/rack/CVE-2015-3225.yml
bundler-audit-0.6.0	data/ruby-advisory-db/gems/rack/CVE-2015-3225.yml
bundler-audit-0.5.0	data/ruby-advisory-db/gems/rack/CVE-2015-3225.yml