CVE-2016-0751

Severity: high (CVSS 7.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 9.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-02-16 · updated 2026-06-17
Weakness: CWE-399

Description

actionpack/lib/action_dispatch/http/mime_type.rb in Action Pack in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 does not properly restrict use of the MIME type cache, which allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP Accept header.

Affected products

Ruby on Rails: 4.0.0, 4.0.0-beta, 4.0.0-rc1, 4.0.0-rc2, 4.0.1, 4.0.1-rc1 (+54)
rubyonrails Ruby On Rails: through 3.2.22; 4.0.10-rc2, 4.0.11, 4.0.11.1, 4.0.12, 4.0.13, 4.0.13-rc1 (+1)

References

http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178043.html
http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178067.html
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00053.html
http://lists.opensuse.org/opensuse-updates/2016-02/msg00034.html
http://lists.opensuse.org/opensuse-updates/2016-02/msg00043.html
http://rhn.redhat.com/errata/RHSA-2016-0296.html
http://www.debian.org/security/2016/dsa-3464
http://www.openwall.com/lists/oss-security/2016/01/25/9
http://www.securityfocus.com/bid/81800
http://www.securitytracker.com/id/1034816
https://groups.google.com/forum/message/raw?msg=ruby-security-ann/9oLY_FCzvoc/5CDXbvpYEgAJ
http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178043.html

Get alerted when CVE-2016-0751 or the next vulnerability affects your stack