{
  "cveId": "CVE-2025-46727",
  "url": "https://patchblox.com/security/cve/CVE-2025-46727",
  "summary": "CVE-2025-46727 is fixed in 6 products on 1 platform, first by ruby-rack 2.0.7-2ubuntu0.1\u002Besm7, released May 7, 2025. It is not reported as exploited. Patch Radar priority: High.",
  "title": "ruby-rack: Rack is a modular Ruby web server interface",
  "description": "Rack is a modular Ruby web server interface. Prior to versions 2.2.14,3.0.16, and 3.1.14, \u0060Rack::QueryParser\u0060 parses query strings and\u0060application/x-www-form-urlencoded\u0060 bodies into Ruby data structureswithout imposing any limit on the number of parameters, allowing attackersto send requests with extremely large numbers of parameters. Thevulnerability arises because \u0060Rack::QueryParser\u0060 iterates over each\u0060\u0026\u0060-separated key-value pair and adds it to a Hash without enforcing anupper bound on the total number of parameters. This allows an attacker tosend a single request containing hundreds of thousands (or more) ofparameters, which consumes excessive memory and CPU during parsing. Anattacker can trigger denial of service by sending specifically crafted HTTPrequests, which can cause memory exhaustion or pin CPU resources, stallingor crashing the Rack server. This results in full service disruption untilthe affected worker is restarted. Versions 2.2.14, 3.0.16, and 3.1.14 fixthe issue. Some other mitigations are available. One may use middleware toenforce a maximum query string size or parameter count, or employ a reverseproxy (such as Nginx) to limit request sizes and reject oversized querystrings or bodies. Limiting request body sizes and query string lengths atthe web server or CDN level is an effective mitigation.",
  "published": "2025-05-07T17:00:00Z",
  "severity": "Medium",
  "cvss": 7.5,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.01228,
  "epssPercentile": 0.6908,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "cockpit-ha-cluster",
      "release": "ol 10",
      "fixedVersion": "0:0.12.0-3.el10_0.2",
      "fix": "ELSA-2025-8319",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-8319",
      "released": "2025-07-02T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pcs",
      "release": "RHEL 10",
      "fixedVersion": "0.12.0-3.el10_0.2",
      "fix": "RHSA-2025:8319",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-8319",
      "released": "2025-05-07T23:07:40Z"
    },
    {
      "platform": "linux",
      "product": "pcs",
      "release": "RHEL 8",
      "fixedVersion": "0:0.10.18-2.el8_10.5",
      "fix": "RHSA-2025:8254",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-8254",
      "released": "2025-05-28T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pcs",
      "release": "RHEL 9",
      "fixedVersion": "0:0.11.9-2.el9_6.1",
      "fix": "RHSA-2025:8256",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-8256",
      "released": "2025-05-28T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pcs",
      "release": "almalinux 8",
      "fixedVersion": "0.10.18-2.el8_10.5.alma.1",
      "fix": "ALSA-2025:8254",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-8254",
      "released": "2025-05-28T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pcs",
      "release": "ol 10",
      "fixedVersion": "0:0.12.0-3.el10_0.2",
      "fix": "ELSA-2025-8319",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-8319",
      "released": "2025-07-02T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pcs",
      "release": "ol 8",
      "fixedVersion": "0:0.10.18-2.0.1.el8_10.5",
      "fix": "ELSA-2025-8254",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-8254",
      "released": "2025-05-28T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pcs",
      "release": "ol 9",
      "fixedVersion": "0:0.11.9-2.el9_6.1",
      "fix": "ELSA-2025-8256",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-8256",
      "released": "2025-05-29T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pcs",
      "release": "rocky 8",
      "fixedVersion": "0:0.10.18-2.el8_10.5",
      "fix": "RLSA-2025:8254",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2025-8254",
      "released": "2025-07-29T13:38:44Z"
    },
    {
      "platform": "linux",
      "product": "pcs",
      "release": "rocky 9",
      "fixedVersion": "0:0.11.9-2.el9_6.1",
      "fix": "RLSA-2025:8256",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2025-8256",
      "released": "2025-10-04T00:12:15Z"
    },
    {
      "platform": "linux",
      "product": "pcs-snmp",
      "release": "RHEL 8",
      "fixedVersion": "0:0.10.18-2.el8_10.5",
      "fix": "RHSA-2025:8254",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-8254",
      "released": "2025-05-28T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pcs-snmp",
      "release": "RHEL 9",
      "fixedVersion": "0:0.11.9-2.el9_6.1",
      "fix": "RHSA-2025:8256",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-8256",
      "released": "2025-05-28T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pcs-snmp",
      "release": "almalinux 8",
      "fixedVersion": "0.10.18-2.el8_10.5.alma.1",
      "fix": "ALSA-2025:8254",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-8254",
      "released": "2025-05-28T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pcs-snmp",
      "release": "ol 10",
      "fixedVersion": "0:0.12.0-3.el10_0.2",
      "fix": "ELSA-2025-8319",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-8319",
      "released": "2025-07-02T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pcs-snmp",
      "release": "ol 8",
      "fixedVersion": "0:0.10.18-2.0.1.el8_10.5",
      "fix": "ELSA-2025-8254",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-8254",
      "released": "2025-05-28T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pcs-snmp",
      "release": "ol 9",
      "fixedVersion": "0:0.11.9-2.el9_6.1",
      "fix": "ELSA-2025-8256",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-8256",
      "released": "2025-05-29T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "rmt-server",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "2.23-150500.3.34.2",
      "fix": "SUSE-SU-2025:02564-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02564-1",
      "released": "2025-07-31T06:26:40Z"
    },
    {
      "platform": "linux",
      "product": "rmt-server",
      "release": "sles 15.6",
      "fixedVersion": "2.23-150500.3.34.2",
      "fix": "SUSE-SU-2025:02564-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02564-1",
      "released": "2025-07-31T06:26:40Z"
    },
    {
      "platform": "linux",
      "product": "rmt-server",
      "release": "sles 15.7",
      "fixedVersion": "2.23-150700.3.6.1",
      "fix": "SUSE-SU-2025:02330-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02330-1",
      "released": "2025-07-16T11:10:11Z"
    },
    {
      "platform": "linux",
      "product": "ruby-rack",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "2.2.20-0\u002Bdeb12u1",
      "fix": "DEBIAN-CVE-2025-46727",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-46727",
      "released": "2025-05-07T23:15:54Z"
    },
    {
      "platform": "linux",
      "product": "ruby-rack",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "3.1.16-0.1",
      "fix": "DEBIAN-CVE-2025-46727",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-46727",
      "released": "2025-05-07T23:15:54Z"
    },
    {
      "platform": "linux",
      "product": "ruby-rack",
      "release": "Debian 14",
      "fixedVersion": "3.1.16-0.1",
      "fix": "DEBIAN-CVE-2025-46727",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-46727",
      "released": "2025-05-07T23:15:54Z"
    },
    {
      "platform": "linux",
      "product": "ruby-rack",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "2.0.7-2ubuntu0.1\u002Besm7",
      "fix": "ruby-rack 2.0.7-2ubuntu0.1\u002Besm7",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-ruby-rack-2.0.7-2ubuntu0.1-esm7",
      "released": "2025-05-07T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "ruby-rack",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "2.1.4-5ubuntu1.1\u002Besm2",
      "fix": "ruby-rack 2.1.4-5ubuntu1.1\u002Besm2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-ruby-rack-2.1.4-5ubuntu1.1-esm2",
      "released": "2025-05-07T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "ruby-rack",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "2.2.7-1ubuntu0.3",
      "fix": "ruby-rack 2.2.7-1ubuntu0.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-ruby-rack-2.2.7-1ubuntu0.3",
      "released": "2025-05-07T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "ruby-rack",
      "release": "Ubuntu 24.10 (oracular)",
      "fixedVersion": "2.2.7-1.1ubuntu0.2",
      "fix": "ruby-rack 2.2.7-1.1ubuntu0.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-oracular-ruby-rack-2.2.7-1.1ubuntu0.2",
      "released": "2025-05-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "ruby-rack",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "2.2.7-1.1ubuntu0.25.04.1",
      "fix": "ruby-rack 2.2.7-1.1ubuntu0.25.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-ruby-rack-2.2.7-1.1ubuntu0.25.04.1",
      "released": "2025-05-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "ruby-rack",
      "release": "Ubuntu 25.10 (questing)",
      "fixedVersion": "3.1.16-0.1",
      "fix": "ruby-rack 3.1.16-0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-questing-ruby-rack-3.1.16-0.1",
      "released": "2025-05-07T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "rubygem-rack",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "2.0.8-150000.3.31.1",
      "fix": "SUSE-SU-2025:01586-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-01586-1",
      "released": "2025-05-19T17:23:40Z"
    },
    {
      "platform": "linux",
      "product": "rubygem-rack",
      "release": "sles 15.6",
      "fixedVersion": "2.0.8-150000.3.31.1",
      "fix": "SUSE-SU-2025:01586-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-01586-1",
      "released": "2025-05-19T17:23:40Z"
    },
    {
      "platform": "linux",
      "product": "rubygem-rack",
      "release": "sles 15.7",
      "fixedVersion": "2.0.8-150000.3.31.1",
      "fix": "SUSE-SU-2025:01586-2",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-01586-2",
      "released": "2025-06-03T09:17:02Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T19:12:23Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}