Back to Database
Status published
High
CVE-2018-16470
There is a possible DoS vulnerability in the multipart parser...
Vulnerability Description
There is a possible DoS vulnerability in the multipart parser in Rack before 2.0.6. Specially crafted requests can cause the multipart parser to enter a pathological state, causing the parser to use CPU resources disproportionate to the request size.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-16470
Credits & Attribution
No credits recorded in the NVD database.
References
Affected Vendor
Rack
View all reports →Affected Software
Rack
Vulnerable Versions:
2.0.6
Timeline
Official Publish:
November 13th, 2018
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H