CVE-2019-5419 PUBLISHED

There is a possible denial of service vulnerability in Action View (Rails) <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 where specially crafted accept headers can cause action view to consume 100% cpu and make the server unresponsive.

EPSS 12.12% · 93.7th percentile

Risk Scores

EPSS Score
12.12%
93.7th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:16.04:LTSrails0, 2:4.1.10-1, 2:4.2.5-1
Ubuntu:Pro:18.04:LTSrails0, 2:4.2.9-2, 2:4.2.9-4

Timeline

References

Open in Interactive Console →