Wind River Support Network

HomeDefectsLIN1021-7326
Fixed

LIN1021-7326 : Security Advisory - rack - CVE-2024-25126

Created: Feb 22, 2024    Updated: Jul 27, 2025
Resolved Date: Jul 27, 2025
Found In Version: 10.21.20.1
Severity: Standard
Applicable for: Wind River Linux LTS 21
Component/s: Userspace

Description

Rack is a modular Ruby web server interface. Carefully crafted content type headers can cause Rack’s media type parser to take much longer than expected, leading to a possible denial of service vulnerability (ReDos 2nd degree polynomial). This vulnerability is patched in 3.0.9.1 and 2.2.8.1.

https://nvd.nist.gov/vuln/detail/CVE-2024-25126
  • Linkedin
  • Facebook
  • Twitter
  • Youtube