onyx --cves cve-2019-5419
CVE-2019-5419
- score
- <0.1
- cvss
- 7.5
- epss
- 8.8%
- published
- 2019-03-27
- kev added
- —
- first seen
Action View (Rails) < 5.2.2.1, < 5.1.6.2, < 5.0.7.2, < 4.2.11.1 contains a denial of service caused by specially crafted accept headers, letting the server become unresponsive due to 100% CPU consumption.
Timeline
How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.
- Published
- Tracked by Onyx
- Public PoC
Exploit availability
Public PoC flagged by vulnx; no direct exploit link among the citations.
Weaknesses
References 12
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00011.html
- http://www.openwall.com/lists/oss-security/2019/03/22/1
- https://access.redhat.com/errata/RHSA-2019:1149
- https://access.redhat.com/errata/RHSA-2019:1289
- https://weblog.rubyonrails.org/2019/3/13/Rails-4-2-5-1-5-1-6-2-have-been-released/
- https://groups.google.com/forum/#%21topic/rubyonrails-security/GN7w9fFAQeI
- http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00025.html
- http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00001.html
- https://access.redhat.com/errata/RHSA-2019:0796
- https://access.redhat.com/errata/RHSA-2019:1147
- https://lists.debian.org/debian-lts-announce/2019/03/msg00042.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y43636TH4D6T46IC6N2RQVJTRFJAAYGA/