Oval Definition:oval:com.ubuntu.xenial:def:201150360000000
Revision Date:2011-12-30Version:1
Title:CVE-2011-5036 on Ubuntu 16.04 LTS (xenial) - medium.
Description:Rack before 1.1.3, 1.2.x before 1.2.5, and 1.3.x before 1.3.6 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2011-5036
Platform(s):Ubuntu 16.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 16.04 LTS (xenial) is installed.
  • AND ruby-rack package in xenial, is related to the CVE in some way and has been fixed (note: '1.4.1-1').
  • BACK