CVE-2025-61919

{"id": "CVE-2025-61919", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-61919", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-10-10T20:48:10.264464Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "rack", "product": "rack", "versions": [{"status": "affected", "version": "< 2.2.20"}, {"status": "affected", "version": ">= 3.0, < 3.1.18"}, {"status": "affected", "version": ">= 3.2, < 3.2.3"}]}]}], "published": "2025-10-10T20:15:37.730", "references": [{"url": "https://github.com/rack/rack/commit/4e2c903991a790ee211a3021808ff4fd6fe82881", "tags": ["Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/rack/rack/commit/cbd541e8a3d0c5830a3c9a30d3718ce2e124f9db", "tags": ["Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/rack/rack/commit/e179614c4a653283286f5f046428cbb85f21146f", "tags": ["Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/rack/rack/security/advisories/GHSA-6xw4-3v39-52mm", "tags": ["Mitigation", "Third Party Advisory"], "source": "security-advisories@github.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-400"}]}], "descriptions": [{"lang": "en", "value": "Rack is a modular Ruby web server interface. Prior to versions 2.2.20, 3.1.18, and 3.2.3, `Rack::Request#POST` reads the entire request body into memory for `Content-Type: application/x-www-form-urlencoded`, calling `rack.input.read(nil)` without enforcing a length or cap. Large request bodies can therefore be buffered completely into process memory before parsing, leading to denial of service (DoS) through memory exhaustion. Users should upgrade to Rack version 2.2.20, 3.1.18, or 3.2.3, anu of which enforces form parameter limits using `query_parser.bytesize_limit`, preventing unbounded reads of `application/x-www-form-urlencoded` bodies. Additionally, enforce strict maximum body size at the proxy or web server layer (e.g., Nginx `client_max_body_size`, Apache `LimitRequestBody`)."}, {"lang": "es", "value": "Rack es una interfaz modular de servidor web Ruby. Antes de las versiones 2.2.20, 3.1.18 y 3.2.3, 'Rack::Request#POST' lee el cuerpo completo de la solicitud en la memoria para 'Content-Type: application/x-www-form-urlencoded', llamando a 'rack.input.read(nil)' sin aplicar una longitud o l\u00edmite. Los cuerpos de solicitud grandes pueden, por lo tanto, ser almacenados en b\u00fafer completamente en la memoria del proceso antes del an\u00e1lisis, lo que lleva a una denegaci\u00f3n de servicio (DoS) por agotamiento de memoria. Los usuarios deben actualizar a la versi\u00f3n de Rack 2.2.20, 3.1.18 o 3.2.3, cualquiera de las cuales aplica l\u00edmites de par\u00e1metros de formulario usando 'query_parser.bytesize_limit', evitando lecturas ilimitadas de cuerpos 'application/x-www-form-urlencoded'. Adem\u00e1s, aplique un tama\u00f1o m\u00e1ximo estricto del cuerpo en la capa del proxy o del servidor web (por ejemplo, Nginx 'client_max_body_size', Apache 'LimitRequestBody')."}], "lastModified": "2026-10-19T16:10:00.260", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:rack:rack:*:*:*:*:*:ruby:*:*", "vulnerable": true, "matchCriteriaId": "2077D030-4BE1-4CB4-8C9B-ACCA0B01BB0D", "versionEndExcluding": "2.2.20"}, {"criteria": "cpe:2.3:a:rack:rack:*:*:*:*:*:ruby:*:*", "vulnerable": true, "matchCriteriaId": "52554FFF-7EF2-473A-8686-6D029CC8F6EF", "versionEndExcluding": "3.1.18", "versionStartIncluding": "3.0.0"}, {"criteria": "cpe:2.3:a:rack:rack:*:*:*:*:*:ruby:*:*", "vulnerable": true, "matchCriteriaId": "AA3F6ADB-DBDD-4C26-A019-D5AE5961F3CC", "versionEndExcluding": "3.2.3", "versionStartIncluding": "3.2.0"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}