CVE-2016-0751

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2016-0751
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-0751.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2016-0751
Aliases
Downstream
Related
Published
2016-02-16T02:59:05.877Z
Modified
2026-04-11T19:41:15.792595Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

actionpack/lib/actiondispatch/http/mimetype.rb in Action Pack in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 does not properly restrict use of the MIME type cache, which allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP Accept header.

References

Affected packages

Git / github.com/rails/rails

Affected ranges

Type
GIT
Repo
https://github.com/rails/rails
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
375d9a0a7fb329b0fbbd75a13e93e53a00520587
Last affected
202041e762a98cb433c3a24a0b03308d4e05a99d
Last affected
1ec64297f9347986a11ce38af2cc3434d99c66c2
Last affected
7b0d3a550328f64f23f38a27864419d72b941f2f
Last affected
5505c1d700f17e2009e1189a7aa6dafafe7062a4
Last affected
3f2bc99024d25c73f5de66a36d3f897c484705b8
Last affected
3449a204014c2c4db2238559a75586400766adee
Last affected
b91f81c45bce0ecde0901d1a595051b8552a93fa
Last affected
9466dad7468f106bad6f8e2a0b468fb3ab113dcb
Last affected
98d06c6bd4eefeeb342d05116fccefa11875cb9b
Last affected
1f6113c6a9f1f2f8e362b0e7702afac5d8cf98db
Last affected
2abe4b032d080f7177c6f2e34c9124c468e8a293
Last affected
15ac2f0b6b2702f180707f480eb966a4e3b96e25
Last affected
276b72c60342eb716e7457b447bce1e352780e92
Last affected
100682883ba38cd8420350ef21d47f26e1b9c6c5
Last affected
13c6bac0b73d4bba9cf0714b65cd1e339ee481b2
Last affected
9649cb4b51c7f0194e02252e5b88a362a70da97f
Last affected
f17b04a23e7c597876cb2320ef9d525537e0b0a8
Last affected
31e922996b97b7c223ebc1e26d1a1a2764bb0a62
Last affected
b792566f3ebdd0c7dc688db7a4076d1c2c74f69f
Last affected
5aef91ea98f5df16ab6b9db14229dfba7dee1653
Last affected
77b60a2c43c1188d4d2d2e52fa5fd59b50e92e1b
Last affected
4e168015cef61207981d2427d4dbb6cf15f71182
Last affected
f706d5f945c5751072bb90d080aff154e6858435
Last affected
254e8e2c97b5df1dafd54cf8f305f7bad05f4a63
Last affected
0690f6f3a47b8fddf60ac57da006f0b8bfa22e32
Last affected
fcb1afc245455130ca6d42db8760cc7b43b99d18
Last affected
5006b63ae3609aee86c4dae603d8dfe80230b1b1
Last affected
6ed0f63398ba7268c541f9b959f7a56b68584301
Last affected
dfa7a76de8c1f7af0ef28119f9ac3072057c665e
Last affected
7c4bfe1c954ef90acf4f790e46fcbbd07d85af3e
Last affected
9bb76261d39b59e7e229c80d052ca91a65ff17be
Last affected
c5310bed8642656ade02d97c6fae651b54654a6b
Last affected
6fe2572af11dc42f33d4f0e33a22391a85f2a1d2
Last affected
b32babc4b0ff8f830933f25375ce9dbfbb356601
Last affected
cca85ba699242c3266c5132dd601fdd8c5c5bb16
Last affected
5496ec8aac95f728465f218d12733cedef84232a
Last affected
adfda00f06248435e0aa2fc6545b1310644d91b6
Last affected
10ac0155b19ea5b457417244f4f327404b997935
Last affected
6a23bf0f4c33151e0cec0648e271dc6f5ab3f686
Last affected
21bc83306b76c456e83f8824cb5822f9f1195d9c
Last affected
331d7c6f9e6a481a23e5f120d95f7c0aabb6c60d
Last affected
4daebedcc41e35079c47d5f130f5c7ad12db8bbb
Last affected
62264419e95a75da7762caf7d566982d24227794
Last affected
4c67c1f551f182aa2730a8a8cfa80fcf02622a92
Last affected
203000dd4683e2ce4bdeaa3fe379b811ba8e5401
Last affected
f1ccb2e6ecb5486179ee6b20438d562ac45de4f4
Last affected
59bb184078cc23fbbb3a28dc34a51326da87014a
Last affected
d48bb9cb018a83a88dd04c9a4cbdee1f5b7ab885
Last affected
4e2754b5c73e2fd6a8f997beafcbeff888410581
Last affected
9bd0ca4501879709fcc84a6b206835fe4ead751f
Last affected
5d101c33fa19deca00e251152d25090cc152998f
Last affected
6ac6daa43e1c5b7388f8fd69f8117eb7668887c7
Last affected
496bbfe0897b06c8af1404b59fca7869a27c870d
Last affected
dac822ef58ae05f0e805222fa8744116080165ac
Last affected
b5cb514c23f64ffd6db05535730df2b4f71f0c61
Last affected
73521d586981279a99d3ba038d62e2414125df7a
Last affected
a37d0e57571f37e836638934a4e325c3accb550b
Last affected
5bda404fe1d7b5772560fdec99818b239d4b57aa
Last affected
099ddfdefd44fda11d0f6a72f934f8a0ee83141b
Last affected
9dc8ddc39424818a3d713a353353ac20cb431218
Last affected
91d4433d18b646a8ceb02ea13939ede4710b89ed
Last affected
8cf8a08c7ef417b5183928f1c3c6d785c115bb48
Last affected
a1ec4da291dd3e0705be536e71a963d8d356ff24
Last affected
ee20103f1b2fa2ea66834682c7173bb23ddd83e0
Last affected
3c194d4a8d585547d1fe45f596d2800c155b1a4c
Last affected
e63670a414828148b688eb0efb1e8e626798e7d9
Last affected
260da06e6b63f4644fe67e67fbd486585f9d2724
Database specific 
{
    "source": "CPE_FIELD",
    "cpe": [
        "cpe:2.3:a:rubyonrails:rails:4.0.0:-:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.0.0:beta:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.0.0:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.0.0:rc2:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.0.1:-:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.0.1:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.0.1:rc2:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.0.1:rc3:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.0.1:rc4:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.0.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.0.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.0.4:*:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.0.5:*:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.0.6:*:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.0.6:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.0.6:rc2:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.0.6:rc3:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.0.7:*:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.0.8:*:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.0.9:*:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.0.10:*:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.0.10:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.1.0:-:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.1.0:beta1:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.1.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.1.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.1.2:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.1.2:rc2:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.1.2:rc3:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.1.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.1.4:*:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.1.5:*:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.1.6:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.1.7:*:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.1.8:*:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.1.9:*:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.1.10:*:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.1.12:*:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.1.13:*:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.2.0:beta1:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.2.0:beta2:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.2.0:beta3:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.2.0:beta4:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.2.0:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.2.0:rc2:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.2.0:rc3:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.2.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.2.1:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.2.1:rc2:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.2.1:rc3:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.2.1:rc4:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.2.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.2.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.2.3:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.2.4:*:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.2.4:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.2.5:*:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.2.5:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:4.2.5:rc2:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:rails:5.0.0:beta1:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:ruby_on_rails:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:ruby_on_rails:4.0.10:rc2:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:ruby_on_rails:4.0.11:*:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:ruby_on_rails:4.0.11.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:ruby_on_rails:4.0.12:*:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:ruby_on_rails:4.0.13:*:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:ruby_on_rails:4.0.13:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:rubyonrails:ruby_on_rails:4.1.11:*:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.0.0-NA"
        },
        {
            "last_affected": "4.0.0-beta"
        },
        {
            "last_affected": "4.0.0-rc1"
        },
        {
            "last_affected": "4.0.0-rc2"
        },
        {
            "last_affected": "4.0.1-NA"
        },
        {
            "last_affected": "4.0.1-rc1"
        },
        {
            "last_affected": "4.0.1-rc2"
        },
        {
            "last_affected": "4.0.1-rc3"
        },
        {
            "last_affected": "4.0.1-rc4"
        },
        {
            "last_affected": "4.0.2"
        },
        {
            "last_affected": "4.0.3"
        },
        {
            "last_affected": "4.0.4"
        },
        {
            "last_affected": "4.0.5"
        },
        {
            "last_affected": "4.0.6"
        },
        {
            "last_affected": "4.0.6-rc1"
        },
        {
            "last_affected": "4.0.6-rc2"
        },
        {
            "last_affected": "4.0.6-rc3"
        },
        {
            "last_affected": "4.0.7"
        },
        {
            "last_affected": "4.0.8"
        },
        {
            "last_affected": "4.0.9"
        },
        {
            "last_affected": "4.0.10"
        },
        {
            "last_affected": "4.0.10-rc1"
        },
        {
            "last_affected": "4.1.0-NA"
        },
        {
            "last_affected": "4.1.0-beta1"
        },
        {
            "last_affected": "4.1.1"
        },
        {
            "last_affected": "4.1.2"
        },
        {
            "last_affected": "4.1.2-rc1"
        },
        {
            "last_affected": "4.1.2-rc2"
        },
        {
            "last_affected": "4.1.2-rc3"
        },
        {
            "last_affected": "4.1.3"
        },
        {
            "last_affected": "4.1.4"
        },
        {
            "last_affected": "4.1.5"
        },
        {
            "last_affected": "4.1.6-rc1"
        },
        {
            "last_affected": "4.1.7"
        },
        {
            "last_affected": "4.1.8"
        },
        {
            "last_affected": "4.1.9"
        },
        {
            "last_affected": "4.1.10"
        },
        {
            "last_affected": "4.1.12"
        },
        {
            "last_affected": "4.1.13"
        },
        {
            "last_affected": "4.2.0-beta1"
        },
        {
            "last_affected": "4.2.0-beta2"
        },
        {
            "last_affected": "4.2.0-beta3"
        },
        {
            "last_affected": "4.2.0-beta4"
        },
        {
            "last_affected": "4.2.0-rc1"
        },
        {
            "last_affected": "4.2.0-rc2"
        },
        {
            "last_affected": "4.2.0-rc3"
        },
        {
            "last_affected": "4.2.1"
        },
        {
            "last_affected": "4.2.1-rc1"
        },
        {
            "last_affected": "4.2.1-rc2"
        },
        {
            "last_affected": "4.2.1-rc3"
        },
        {
            "last_affected": "4.2.1-rc4"
        },
        {
            "last_affected": "4.2.2"
        },
        {
            "last_affected": "4.2.3"
        },
        {
            "last_affected": "4.2.3-rc1"
        },
        {
            "last_affected": "4.2.4"
        },
        {
            "last_affected": "4.2.4-rc1"
        },
        {
            "last_affected": "4.2.5"
        },
        {
            "last_affected": "4.2.5-rc1"
        },
        {
            "last_affected": "4.2.5-rc2"
        },
        {
            "last_affected": "5.0.0-beta1"
        },
        {
            "last_affected": "3.2.22"
        },
        {
            "last_affected": "4.0.10-rc2"
        },
        {
            "last_affected": "4.0.11"
        },
        {
            "last_affected": "4.0.11.1"
        },
        {
            "last_affected": "4.0.12"
        },
        {
            "last_affected": "4.0.13"
        },
        {
            "last_affected": "4.0.13-rc1"
        },
        {
            "last_affected": "4.1.11"
        }
    ]
}

Affected versions

v0.*
v0.10.0
v0.10.1
v0.11.0
v0.11.1
v0.12.0
v0.13.0
v0.13.1
v0.14.1
v0.14.3
v0.9.1
v0.9.2
v0.9.3
v0.9.4
v0.9.4.1
v0.9.5
v1.*
v1.1.0
v1.1.0_RC1
v1.1.1
v2.*
v2.0.0
v2.0.0_PR
v2.0.0_RC1
v2.0.0_RC2
v2.0.1
v3.*
v3.0.0.beta.3
v3.0.0.beta3
v3.1.0.beta1
v3.1.0.rc1
v3.2.0
v3.2.0.rc1
v3.2.0.rc2
v3.2.1
v3.2.16
v3.2.21
v3.2.22
v3.2.3.rc1
v3.2.5
v3.2.8.rc1
v3.2.9.rc1
v3.2.9.rc2
v4.*
v4.0.0
v4.0.0.beta1
v4.0.0.rc1
v4.0.0.rc2
v4.0.1
v4.0.1.rc1
v4.0.1.rc2
v4.0.1.rc3
v4.0.1.rc4
v4.0.10
v4.0.10.rc1
v4.0.10.rc2
v4.0.11
v4.0.11.1
v4.0.12
v4.0.13
v4.0.13.rc1
v4.0.2
v4.0.3
v4.0.4
v4.0.4.rc1
v4.0.5
v4.0.6
v4.0.6.rc1
v4.0.6.rc2
v4.0.6.rc3
v4.0.7
v4.0.8
v4.0.9
v4.1.0
v4.1.0.beta1
v4.1.0.rc1
v4.1.0.rc2
v4.1.1
v4.1.10
v4.1.10.rc1
v4.1.10.rc2
v4.1.10.rc3
v4.1.10.rc4
v4.1.11
v4.1.12
v4.1.12.rc1
v4.1.13
v4.1.13.rc1
v4.1.2
v4.1.2.rc1
v4.1.2.rc2
v4.1.2.rc3
v4.1.3
v4.1.4
v4.1.5
v4.1.6
v4.1.6.rc1
v4.1.6.rc2
v4.1.7
v4.1.8
v4.1.9
v4.1.9.rc1
v4.2.0.beta1
v4.2.0.beta2
v4.2.0.beta3
v4.2.0.beta4
v4.2.0.rc1
v4.2.0.rc2
v4.2.0.rc3
v4.2.1
v4.2.1.rc1
v4.2.1.rc2
v4.2.1.rc3
v4.2.1.rc4
v4.2.2
v4.2.3
v4.2.3.rc1
v4.2.4
v4.2.4.rc1
v4.2.5
v4.2.5.rc1
v4.2.5.rc2
v5.*
v5.0.0.beta1

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-0751.json"