The remote host is affected by the vulnerability described in GLSA-202310-18 (Rack: Multiple Vulnerabilities)

  - A possible denial of service vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 in the multipart     parsing component of Rack. (CVE-2022-30122)

  - A sequence injection vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 which could allow is a     possible shell escape in the Lint and CommonLogger components of Rack. (CVE-2022-30123)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2192-1 advisory.

  - A possible denial of service vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 in the multipart     parsing component of Rack. (CVE-2022-30122)

  - A sequence injection vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 which could allow is a     possible shell escape in the Lint and CommonLogger components of Rack. (CVE-2022-30123)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:7242 advisory.

    Red Hat Satellite is a system management solution that allows organizations to configure and maintain     their systems without the necessity to provide public Internet access to their servers or other client     systems. It performs provisioning and configuration management of predefined standard operating     environments.

    This update fixes the following bugs:

    2131757 - Enhance foreman-rake katello:correct_repositories to handle Katello::Errors::CandlepinError:
    Unable to find content with the ID xxxxxxxxxxx.
    2131759 - RHEL 9 provisioned host goes into emergency mode after initial reboot     2131761 - hammer cannot use the cluster name or id as valid input when clusters are residing inside     folders and fails with error Fog::Vsphere::Compute::NotFound error     2131763 - Running satellite-maintain self-upgrade on a Satellite\Capsule 6.11.1.1 fails with error     Error: 'satellite-maintenance-6.11.2-for-rhel-8-x86_64-rpms' does not match a valid repository ID     2131769 - Post upgrade to 6.11.z, DHCP error with wrong number of arguments for validate_supported_address     2131771 - With every edit of an exising webhook, the value in password field disappears in Satellite     6.10/6.11/6.12     2131773 - foreman-maintain still enables ansible-2.9-for-rhel-8-x86_64-rpms repository for running an     update to 6.11.z when no packages are installed from that repository     2131776 - please update to Satellite Ansible Collection 3.6.0     2131781 - 'candlepin-validate-db' pre-upgrade check fails with Could not open SSL root certificate file     /root/.postgresql/root.crt error for external DB setup with SSL     2131788 - Documentation bug for the compute_resource module     2131790 - [BUG] Invalid choice for template_kind listed for os_default_template module     2132075 - CVE-2022-31163 tfm-rubygem-tzinfo: rubygem-tzinfo: arbitrary code execution [rhn_satellite_6.11]     2132076 - CVE-2022-31163 rubygem-tzinfo: rubygem-tzinfo: arbitrary code execution [rhn_satellite_6.11]     2132079 - CVE-2022-30122 rubygem-rack: crafted multipart POST request may cause a DoS     [rhn_satellite_6-default]     2122205 - Package python3-pulp_manifest is not available in Satellite Utils repository     2132999 - Satellite cannot be installed on RHEL 8.7

    CVEs

    CVE-2022-30122     CVE-2022-31163

    Users of Red Hat Satellite are advised to upgrade to these updated packages, which fix these bugs.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:1486 advisory.

    Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB &     OpenTSDB.

    Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic     design. It focuses on automating as much as possible and adhering to the DRY (Don't Repeat Yourself)     principle.

    Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text     files and to perform system management tasks.

    Security Fix(es):

    * puma-5.6.4: http request smuggling vulnerabilities (CVE-2022-24790)

    * rubygem-rack: crafted requests can cause shell escape sequences (CVE-2022-30123)

    * moment: inefficient parsing algorithm resulting in DoS (CVE-2022-31129)

    * rubygem-tzinfo: arbitrary code execution (CVE-2022-31163)

    * rubygem-rack: crafted multipart POST request may cause a DoS (CVE-2022-30122)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has a package installed that is affected by multiple vulnerabilities as referenced in the dsa-5530 advisory.

    Several vulnerabilities were discovered in ruby-rack, a modular Ruby webserver interface, which may result     in denial of service and shell escape sequence injection. For the oldstable distribution (bullseye), these     problems have been fixed in version 2.1.4-3+deb11u1. We recommend that you upgrade your ruby-rack     packages. For the detailed security status of ruby-rack please refer to its security tracker page at:
    https://security-tracker.debian.org/tracker/ruby-rack

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of pcs installed on the remote host is prior to 0.9.169-3. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1895 advisory.

    A denial of service flaw was found in ruby-rack. An attacker crafting multipart POST requests can cause     Rack's multipart parser to take much longer than expected, leading to a denial of service.
    (CVE-2022-30122)

    A flaw was found in ruby gem-rack. This flaw allows a malicious actor to craft requests that can cause     shell escape sequences to be written to the terminal via rack's `Lint` middleware and `CommonLogger`     middleware. This issue can leverage these escape sequences to execute commands in the victim's terminal.
    (CVE-2022-30123)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3095 advisory.

    - -----------------------------------------------------------------------     Debian LTS Advisory DLA-3095-1              debian-lts@lists.debian.org     https://www.debian.org/lts/security/                      Utkarsh Gupta     September 04, 2022                          https://wiki.debian.org/LTS
    - -----------------------------------------------------------------------

    Package        : ruby-rack     Version        : 2.0.6-3+deb10u1     CVE ID         : CVE-2022-30122 CVE-2022-30123

    Two vulnerabilities were discovered in `ruby-rack`, a popular Ruby     webserver:

    CVE-2022-30122:

        Prevent a Denial of Service (DoS) vulnerability in the HTTP         multipart parsing.

    CVE-2022-30123:

        Prevent a potential shell escape sequence injection         vulnerability that could be triggered through the logging system.

    For Debian 10 buster, these problems have been fixed in version     2.0.6-3+deb10u1.

    We recommend that you upgrade your ruby-rack packages.

    For the detailed security status of ruby-rack please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/ruby-rack

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7036-1 advisory.

    It was discovered that Rack was not properly parsing data when processing multipart POST requests. If a     user or automated system were tricked into sending a specially crafted multipart POST request to an     application using Rack, a remote attacker could possibly use this issue to cause a denial of service.
    (CVE-2022-30122)

    It was discovered that Rack was not properly escaping untrusted data when performing logging operations,     which could cause shell escaped sequences to be written to a terminal. If a user or automated system were     tricked into sending a specially crafted request to an application using Rack, a remote attacker could     possibly use this issue to execute arbitrary code in the machine running the application. (CVE-2022-30123)

    It was discovered that Rack did not properly structure regular expressions in some of its parsing     components, which could result in uncontrolled resource consumption if an application using Rack received     specially crafted input. A remote attacker could possibly use this issue to cause a denial of service.
    (CVE-2022-44570, CVE-2022-44571)

    It was discovered that Rack did not properly structure regular expressions in its multipart parsing     component, which could result in uncontrolled resource consumption if an application using Rack to parse     multipart posts received specially crafted input. A remote attacker could possibly use this issue to cause     a denial of service. (CVE-2022-44572)

    It was discovered that Rack incorrectly handled Multipart MIME parsing. A remote attacker could possibly     use this issue to cause Rack to consume resources, leading to a denial of service. (CVE-2023-27530)

    It was discovered that Rack incorrectly handled certain regular expressions. A remote attacker could     possibly use this issue to cause Rack to consume resources, leading to a denial of service.
    (CVE-2023-27539)

    It was discovered that Rack incorrectly parsed certain media types. A remote attacker could possibly use     this issue to cause Rack to consume resources, leading to a denial of service. (CVE-2024-25126)

    It was discovered that Rack incorrectly handled certain Range headers. A remote attacker could possibly     use this issue to cause Rack to create large responses, leading to a denial of service. (CVE-2024-26141)

    It was discovered that Rack incorrectly handled certain crafted headers. A remote attacker could possibly     use this issue to cause Rack to consume resources, leading to a denial of service. (CVE-2024-26146)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5253-1 advisory.

    It was discovered that Rack insecurely handled session ids. An unauthenticated remote attacker could     possibly use this issue to perform a timing attack and hijack sessions. (CVE-2019-16782)

    It was discovered that Rack was incorrectly handling cookies during parsing, not validating them or     performing the necessary integrity checks. An attacker could possibly use this issue to overwrite existing     cookie data and gain control over a remote system's behaviour. This issue only affected Ubuntu 14.04 ESM.
    (CVE-2020-8184)

    It was discovered that Rack was not properly parsing data when processing multipart POST requests. If a     user or automated system were tricked into sending a specially crafted multipart POST request to an     application using Rack, a remote attacker could possibly use this issue to cause a denial of service. This     issue was only fixed in Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. (CVE-2022-30122)

    It was discovered that Rack was not properly escaping untrusted data when performing logging operations,     which could cause shell escaped sequences to be written to a terminal. If a user or automated system were     tricked into sending a specially crafted request to an application using Rack, a remote attacker could     possibly use this issue to execute arbitrary code in the machine running the application. This issue was     only fixed in Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. (CVE-2022-30123)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 ESM / 20.04 ESM / 22.04 ESM host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5896-1 advisory.

    It was discovered that Rack was not properly parsing data when processing multipart POST requests. If a     user or automated system were tricked into sending a specially crafted multipart POST request to an     application using Rack, a remote attacker could possibly use this issue to cause a denial of service.
    (CVE-2022-30122)

    It was discovered that Rack was not properly escaping untrusted data when performing logging operations,     which could cause shell escaped sequences to be written to a terminal. If a user or automated system were     tricked into sending a specially crafted request to an application using Rack, a remote attacker could     possibly use this issue to execute arbitrary code in the machine running the application. (CVE-2022-30123)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
184012	GLSA-202310-18 : Rack: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	10/30/2023	10/30/2023	critical
162555	SUSE SLES15 Security Update : rubygem-rack (SUSE-SU-2022:2192-1)	Nessus	SuSE Local Security Checks	6/28/2022	7/13/2023	critical
194216	RHEL 7 / 8 : Satellite 6.11.4 Async Security Update (Important) (RHSA-2022:7242)	Nessus	Red Hat Local Security Checks	4/28/2024	11/7/2024	high
173453	RHEL 7 : Red Hat Gluster Storage web-admin-build (RHSA-2023:1486)	Nessus	Red Hat Local Security Checks	3/28/2023	11/7/2024	critical
183679	Debian DSA-5530-1 : ruby-rack - security update	Nessus	Debian Local Security Checks	10/22/2023	1/24/2025	critical
168451	Amazon Linux 2 : pcs (ALAS-2022-1895)	Nessus	Amazon Linux Local Security Checks	12/7/2022	12/11/2024	critical
164675	Debian dla-3095 : ruby-rack - security update	Nessus	Debian Local Security Checks	9/4/2022	1/22/2025	critical
207797	Ubuntu 22.04 LTS : Rack vulnerabilities (USN-7036-1)	Nessus	Ubuntu Local Security Checks	9/26/2024	2/17/2025	critical
183143	Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM : Rack vulnerabilities (USN-5253-1)	Nessus	Ubuntu Local Security Checks	10/16/2023	8/27/2024	critical
171938	Ubuntu 18.04 ESM / 20.04 ESM / 22.04 ESM : Rack vulnerabilities (USN-5896-1)	Nessus	Ubuntu Local Security Checks	2/28/2023	8/27/2024	critical

Detections

Analytics

Plugins Search

critical

critical

high

critical

critical

critical

critical

critical

critical

critical