suse · CVE-2016-0751

Quick triage

Priority: low Published: 2021-05-30 13:37:12 UTC Updated: 2025-11-05 04:36:30 UTC

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2016-0751 severity low: SUSE including 15 source package names (libcontainment-insomnia-0.1.1-0.9.4.19, libjansson4-2.2.1-0.9.11.6, …), 30 product×package rows across 9 product lines (SUSE Enterprise Storage 2.1, SUSE Lifecycle Management Server 1.3, … (9 product lines)): Fixed 30.

Description:

actionpack/lib/action_dispatch/http/mime_type.rb in Action Pack in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 does not properly restrict use of the MIME type cache, which allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP Accept header.

cvelogic Threat Intelligence