Skip to content
Fencer Vulns
high 7.5

CVE-2016-0751 json

actionpack is vulnerable to denial of service via a crafted HTTP Accept header

published 2016-02-16 10 y ago modified 2026-06-17 4 mo ago also GHSA-ffpv-c4hm-3x6v , EUVD-2017-0226

cvss
7.5
version 3.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
9.7%
EPSS 9.7% chance of exploitation in 30 days, percentile 95%
public exploits
0
none known

Summary

actionpack/lib/action_dispatch/http/mime_type.rb in Action Pack in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 does not properly restrict use of the MIME type cache, which allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP Accept header.

Patch / fix

  • rubygems actionpack 3.2.22.1, 4.1.14.1, 4.2.5.1
  • rails Debian 14, Debian 13, Debian 12 2:4.2.5.1-1

debian advisories DEBIAN-CVE-2016-0751

  • ruby193-rubygem-actionpack RHEL 2 SOFTWARE_COLLECTIONS 1:3.2.8-16.el6
  • ruby193-rubygem-actionpack RHEL 2 SOFTWARE_COLLECTIONS 1:3.2.8-16.el7
  • ruby193-rubygem-activerecord RHEL 2 SOFTWARE_COLLECTIONS 1:3.2.8-11.el6
  • ruby193-rubygem-activerecord RHEL 2 SOFTWARE_COLLECTIONS 1:3.2.8-11.el7
  • ruby193-rubygem-activesupport RHEL 2 SOFTWARE_COLLECTIONS 1:3.2.8-6.el6
  • ruby193-rubygem-activesupport RHEL 2 SOFTWARE_COLLECTIONS 1:3.2.8-6.el7
  • ror40-rubygem-actionpack RHEL 2 SOFTWARE_COLLECTIONS 1:4.0.2-7.el6
  • ror40-rubygem-actionpack RHEL 2 SOFTWARE_COLLECTIONS 1:4.0.2-7.el7

red hat advisories RHSA-2016:0455RHSA-2016:0454RHSA-2016:0296

  • susestudio Studio Onsite Runner 1.3, Studio Onsite 1.3 1.3.14-52.1
  • qemu-ext2 Studio Onsite Runner 1.3, Studio Onsite 1.3 0.1.1-0.9.4.19
  • libjansson Studio Onsite Runner 1.3, Studio Onsite 1.3 2.2.1-0.9.11.6
  • studio-help Studio Onsite Runner 1.3, Studio Onsite 1.3 1.3.20-0.6.9
  • rubygem-bundler19 Studio Onsite Runner 1.3, Studio Onsite 1.3 1.7.0-0.13.10
  • portus SLE Module for Containers 12 2.0.3-2.4
  • rubygem-actionpack-4_1 OpenStack Cloud 5 4.1.9-9.1
  • rubygem-actionpack-3_2 WebYast 1.3, Studio Onsite 1.3, SLE Software Development Kit 11 SP4 +1 more 3.2.12-0.23.1

suse advisories SUSE-SU-2017:0475-1SUSE-SU-2016:1146-1SUSE-SU-2016:0858-1SUSE-SU-2016:0618-1SUSE-SU-2016:0457-1

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2016-0751 updated cvss 4.3

rubygem-actionpack: possible object leak and denial of service attack in Action Pack

  • Red Hat CloudForms Management Engine 5 ruby193-rubygem-actionpack Red Hat Subscription Asset Manager rubygem-actionpack, ruby193-rubygem-actionpack
    affected: workaround, no fix planned “Will not fix”
  • Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) ror40-rubygem-actionpack 4.0.2-7.el6, ror40-rubygem-activerecord 4.0.2-6.el6, rh-ror41-rubygem-actionpack 4.1.5-3.el6, rh-ror41-rubygem-actionview 4.1.5-4.el6, ror40-rubygem-activesupport 4.0.2-4.el6, ruby193-rubygem-actionpack 3.2.8-16.el6, +5 more Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) ror40-rubygem-actionpack 4.0.2-7.el7, ror40-rubygem-activerecord 4.0.2-6.el7, rh-ror41-rubygem-actionpack 4.1.5-3.el7, rh-ror41-rubygem-actionview 4.1.5-4.el7, ror40-rubygem-activesupport 4.0.2-4.el7, ruby193-rubygem-actionpack 3.2.8-16.el7, +5 more Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6) ror40-rubygem-actionpack 4.0.2-7.el6, ror40-rubygem-activerecord 4.0.2-6.el6, rh-ror41-rubygem-actionpack 4.1.5-3.el6, rh-ror41-rubygem-actionview 4.1.5-4.el6, ror40-rubygem-activesupport 4.0.2-4.el6, ruby193-rubygem-actionpack 3.2.8-16.el6, +5 more Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7) ror40-rubygem-actionpack 4.0.2-7.el6, ror40-rubygem-activerecord 4.0.2-6.el6, rh-ror41-rubygem-actionpack 4.1.5-3.el6, rh-ror41-rubygem-actionview 4.1.5-4.el6, ror40-rubygem-activesupport 4.0.2-4.el6, ruby193-rubygem-actionpack 3.2.8-16.el6, +5 more Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1) ror40-rubygem-actionpack 4.0.2-7.el7, ror40-rubygem-activerecord 4.0.2-6.el7, rh-ror41-rubygem-actionpack 4.1.5-3.el7, rh-ror41-rubygem-actionview 4.1.5-4.el7, ror40-rubygem-activesupport 4.0.2-4.el7, ruby193-rubygem-actionpack 3.2.8-16.el7, +5 more Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2) ror40-rubygem-actionpack 4.0.2-7.el7, ror40-rubygem-activerecord 4.0.2-6.el7, rh-ror41-rubygem-actionpack 4.1.5-3.el7, rh-ror41-rubygem-actionview 4.1.5-4.el7, ror40-rubygem-activesupport 4.0.2-4.el7, ruby193-rubygem-actionpack 3.2.8-16.el7, +5 more
    +2 more products
    Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) ror40-rubygem-actionpack 4.0.2-7.el6, ror40-rubygem-activerecord 4.0.2-6.el6, rh-ror41-rubygem-actionpack 4.1.5-3.el6, rh-ror41-rubygem-actionview 4.1.5-4.el6, ror40-rubygem-activesupport 4.0.2-4.el6, ruby193-rubygem-actionpack 3.2.8-16.el6, +5 more Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) ror40-rubygem-actionpack 4.0.2-7.el7, ror40-rubygem-activerecord 4.0.2-6.el7, rh-ror41-rubygem-actionpack 4.1.5-3.el7, rh-ror41-rubygem-actionview 4.1.5-4.el7, ror40-rubygem-activesupport 4.0.2-4.el7, ruby193-rubygem-actionpack 3.2.8-16.el7, +5 more
    fixed: vendor fix RHSA-2016:0296

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Exploit prediction

9.73% chance of exploitation in the next 30 days, higher than 95% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
NVD 3.0 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD 2.0 5.0 AV:N/AC:L/Au:N/C:N/I:N/A:P
GitHub 3.0 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected packages

ecosystem package affected fixed in
rubygems actionpack
>=4.2.0, <4.2.5.1
<3.2.22.1
>=4.0.0, <4.1.14.1
4.2.5.1
3.2.22.1
4.1.14.1

Classification

Weakness
  • CWE-399 Resource Management Errors
Technology feeds

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.