csaf_redhat - rhsa-2025:8323

rhsa-2025:8323

Vulnerability from csaf_redhat

Published

2025-05-29 16:42

Modified

2025-08-02 11:34

Summary

Red Hat Security Advisory: pcs security update

Notes

Topic

An update for pcs is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, and Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fix(es): * rubygem-rack: Unbounded-Parameter DoS in Rack::QueryParser (CVE-2025-46727) * tornado: Tornado Multipart Form-Data Denial of Service (CVE-2025-47287) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for pcs is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, and Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.\n\nSecurity Fix(es):\n\n* rubygem-rack: Unbounded-Parameter DoS in Rack::QueryParser (CVE-2025-46727)\n\n* tornado: Tornado Multipart Form-Data Denial of Service (CVE-2025-47287)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2025:8323",
        "url": "https://access.redhat.com/errata/RHSA-2025:8323"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2364966",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2364966"
      },
      {
        "category": "external",
        "summary": "2366703",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366703"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_8323.json"
      }
    ],
    "title": "Red Hat Security Advisory: pcs security update",
    "tracking": {
      "current_release_date": "2025-08-02T11:34:47+00:00",
      "generator": {
        "date": "2025-08-02T11:34:47+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.6"
        }
      },
      "id": "RHSA-2025:8323",
      "initial_release_date": "2025-05-29T16:42:11+00:00",
      "revision_history": [
        {
          "date": "2025-05-29T16:42:11+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-05-29T16:42:11+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2025-08-02T11:34:47+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux HighAvailability TUS (v.8.4)",
                "product": {
                  "name": "Red Hat Enterprise Linux HighAvailability TUS (v.8.4)",
                  "product_id": "HighAvailability-8.4.0.Z.TUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_tus:8.4::highavailability"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux HighAvailability E4S (v.8.4)",
                "product": {
                  "name": "Red Hat Enterprise Linux HighAvailability E4S (v.8.4)",
                  "product_id": "HighAvailability-8.4.0.Z.E4S",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_e4s:8.4::highavailability"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "pcs-0:0.10.8-1.el8_4.7.src",
                "product": {
                  "name": "pcs-0:0.10.8-1.el8_4.7.src",
                  "product_id": "pcs-0:0.10.8-1.el8_4.7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pcs@0.10.8-1.el8_4.7?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "pcs-0:0.10.8-1.el8_4.7.x86_64",
                "product": {
                  "name": "pcs-0:0.10.8-1.el8_4.7.x86_64",
                  "product_id": "pcs-0:0.10.8-1.el8_4.7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pcs@0.10.8-1.el8_4.7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pcs-snmp-0:0.10.8-1.el8_4.7.x86_64",
                "product": {
                  "name": "pcs-snmp-0:0.10.8-1.el8_4.7.x86_64",
                  "product_id": "pcs-snmp-0:0.10.8-1.el8_4.7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pcs-snmp@0.10.8-1.el8_4.7?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "pcs-0:0.10.8-1.el8_4.7.ppc64le",
                "product": {
                  "name": "pcs-0:0.10.8-1.el8_4.7.ppc64le",
                  "product_id": "pcs-0:0.10.8-1.el8_4.7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pcs@0.10.8-1.el8_4.7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pcs-snmp-0:0.10.8-1.el8_4.7.ppc64le",
                "product": {
                  "name": "pcs-snmp-0:0.10.8-1.el8_4.7.ppc64le",
                  "product_id": "pcs-snmp-0:0.10.8-1.el8_4.7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pcs-snmp@0.10.8-1.el8_4.7?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pcs-0:0.10.8-1.el8_4.7.ppc64le as a component of Red Hat Enterprise Linux HighAvailability E4S (v.8.4)",
          "product_id": "HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.7.ppc64le"
        },
        "product_reference": "pcs-0:0.10.8-1.el8_4.7.ppc64le",
        "relates_to_product_reference": "HighAvailability-8.4.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pcs-0:0.10.8-1.el8_4.7.src as a component of Red Hat Enterprise Linux HighAvailability E4S (v.8.4)",
          "product_id": "HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.7.src"
        },
        "product_reference": "pcs-0:0.10.8-1.el8_4.7.src",
        "relates_to_product_reference": "HighAvailability-8.4.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pcs-0:0.10.8-1.el8_4.7.x86_64 as a component of Red Hat Enterprise Linux HighAvailability E4S (v.8.4)",
          "product_id": "HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.7.x86_64"
        },
        "product_reference": "pcs-0:0.10.8-1.el8_4.7.x86_64",
        "relates_to_product_reference": "HighAvailability-8.4.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pcs-snmp-0:0.10.8-1.el8_4.7.ppc64le as a component of Red Hat Enterprise Linux HighAvailability E4S (v.8.4)",
          "product_id": "HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.7.ppc64le"
        },
        "product_reference": "pcs-snmp-0:0.10.8-1.el8_4.7.ppc64le",
        "relates_to_product_reference": "HighAvailability-8.4.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pcs-snmp-0:0.10.8-1.el8_4.7.x86_64 as a component of Red Hat Enterprise Linux HighAvailability E4S (v.8.4)",
          "product_id": "HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.7.x86_64"
        },
        "product_reference": "pcs-snmp-0:0.10.8-1.el8_4.7.x86_64",
        "relates_to_product_reference": "HighAvailability-8.4.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pcs-0:0.10.8-1.el8_4.7.src as a component of Red Hat Enterprise Linux HighAvailability TUS (v.8.4)",
          "product_id": "HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.7.src"
        },
        "product_reference": "pcs-0:0.10.8-1.el8_4.7.src",
        "relates_to_product_reference": "HighAvailability-8.4.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pcs-0:0.10.8-1.el8_4.7.x86_64 as a component of Red Hat Enterprise Linux HighAvailability TUS (v.8.4)",
          "product_id": "HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.7.x86_64"
        },
        "product_reference": "pcs-0:0.10.8-1.el8_4.7.x86_64",
        "relates_to_product_reference": "HighAvailability-8.4.0.Z.TUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pcs-snmp-0:0.10.8-1.el8_4.7.x86_64 as a component of Red Hat Enterprise Linux HighAvailability TUS (v.8.4)",
          "product_id": "HighAvailability-8.4.0.Z.TUS:pcs-snmp-0:0.10.8-1.el8_4.7.x86_64"
        },
        "product_reference": "pcs-snmp-0:0.10.8-1.el8_4.7.x86_64",
        "relates_to_product_reference": "HighAvailability-8.4.0.Z.TUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-46727",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2025-05-08T00:00:45.681503+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2364966"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Rack::QueryParser. This vulnerability allows denial of service via oversized HTTP requests containing many parameters, resulting in memory exhaustion that consumes all available memory or CPU resource pinning, which keeps the CPU constantly busy.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "rubygem-rack: Unbounded-Parameter DoS in Rack::QueryParser",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as an IMPORTANT severity because the vulnerabilty was found in the Rack::QueryParser component which arises because Rack::QueryParser parses query strings and application/x-www-form-urlencoded bodies into Ruby data structures without imposing any limit on the number of parameters, when an attacker sends requests with an extremely large number of parameters, Rack::QueryParser consumes excessive memory and CPU during parsing, leading to memory exhaustion, this results in a denial of service, causing the Rack server to crash and leading to full service disruption.\n\nRed Hat Satellite 6.15 includes an affected version of rubygem-rack; however, since it does not utilize Rack::QueryParser, it is not actually vulnerable to the flaw, lowering product-specific impact. The issue has already been addressed in Red Hat Satellite versions 6.16 and 6.17, and updates for other supported versions may follow based on the product lifecycle policy.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.7.ppc64le",
          "HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.7.src",
          "HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.7.x86_64",
          "HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.7.ppc64le",
          "HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.7.x86_64",
          "HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.7.src",
          "HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.7.x86_64",
          "HighAvailability-8.4.0.Z.TUS:pcs-snmp-0:0.10.8-1.el8_4.7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-46727"
        },
        {
          "category": "external",
          "summary": "RHBZ#2364966",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2364966"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-46727",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-46727"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-46727",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-46727"
        },
        {
          "category": "external",
          "summary": "https://github.com/rack/rack/commit/2bb5263b464b65ba4b648996a579dbd180d2b712",
          "url": "https://github.com/rack/rack/commit/2bb5263b464b65ba4b648996a579dbd180d2b712"
        },
        {
          "category": "external",
          "summary": "https://github.com/rack/rack/commit/3f5a4249118d09d199fe480466c8c6717e43b6e3",
          "url": "https://github.com/rack/rack/commit/3f5a4249118d09d199fe480466c8c6717e43b6e3"
        },
        {
          "category": "external",
          "summary": "https://github.com/rack/rack/commit/cd6b70a1f2a1016b73dc906f924869f4902c2d74",
          "url": "https://github.com/rack/rack/commit/cd6b70a1f2a1016b73dc906f924869f4902c2d74"
        },
        {
          "category": "external",
          "summary": "https://github.com/rack/rack/security/advisories/GHSA-gjh7-p2fx-99vx",
          "url": "https://github.com/rack/rack/security/advisories/GHSA-gjh7-p2fx-99vx"
        }
      ],
      "release_date": "2025-05-07T23:07:40.563000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-05-29T16:42:11+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.7.ppc64le",
            "HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.7.src",
            "HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.7.x86_64",
            "HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.7.ppc64le",
            "HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.7.x86_64",
            "HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.7.src",
            "HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.7.x86_64",
            "HighAvailability-8.4.0.Z.TUS:pcs-snmp-0:0.10.8-1.el8_4.7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:8323"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.7.ppc64le",
            "HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.7.src",
            "HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.7.x86_64",
            "HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.7.ppc64le",
            "HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.7.x86_64",
            "HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.7.src",
            "HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.7.x86_64",
            "HighAvailability-8.4.0.Z.TUS:pcs-snmp-0:0.10.8-1.el8_4.7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "rubygem-rack: Unbounded-Parameter DoS in Rack::QueryParser"
    },
    {
      "cve": "CVE-2025-47287",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2025-05-15T22:00:49.780609+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366703"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Tornado. This vulnerability can lead to a a denial of service by generating an extremely high volume of log entries.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tornado: Tornado Multipart Form-Data Denial of Service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability marked as Important because it leverages the synchronous nature of the logging subsystem to induce a DoS condition. Specifically, malformed multipart/form-data payloads cause repeated, blocking log writes, which stall the event loop that underpins Tornado\u2019s asynchronous architecture. Furthermore, because the vulnerable multipart parser is enabled by default, applications that are otherwise well-secured and do not even use file uploads can still be targeted unless they explicitly block these requests at a proxy.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.7.ppc64le",
          "HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.7.src",
          "HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.7.x86_64",
          "HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.7.ppc64le",
          "HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.7.x86_64",
          "HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.7.src",
          "HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.7.x86_64",
          "HighAvailability-8.4.0.Z.TUS:pcs-snmp-0:0.10.8-1.el8_4.7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-47287"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366703",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366703"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-47287",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-47287"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-47287",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47287"
        },
        {
          "category": "external",
          "summary": "https://github.com/tornadoweb/tornado/commit/b39b892bf78fe8fea01dd45199aa88307e7162f3",
          "url": "https://github.com/tornadoweb/tornado/commit/b39b892bf78fe8fea01dd45199aa88307e7162f3"
        },
        {
          "category": "external",
          "summary": "https://github.com/tornadoweb/tornado/security/advisories/GHSA-7cx3-6m66-7c5m",
          "url": "https://github.com/tornadoweb/tornado/security/advisories/GHSA-7cx3-6m66-7c5m"
        }
      ],
      "release_date": "2025-05-15T21:17:55.188000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-05-29T16:42:11+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.7.ppc64le",
            "HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.7.src",
            "HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.7.x86_64",
            "HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.7.ppc64le",
            "HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.7.x86_64",
            "HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.7.src",
            "HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.7.x86_64",
            "HighAvailability-8.4.0.Z.TUS:pcs-snmp-0:0.10.8-1.el8_4.7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:8323"
        },
        {
          "category": "workaround",
          "details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
          "product_ids": [
            "HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.7.ppc64le",
            "HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.7.src",
            "HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.7.x86_64",
            "HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.7.ppc64le",
            "HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.7.x86_64",
            "HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.7.src",
            "HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.7.x86_64",
            "HighAvailability-8.4.0.Z.TUS:pcs-snmp-0:0.10.8-1.el8_4.7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.7.ppc64le",
            "HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.7.src",
            "HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.7.x86_64",
            "HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.7.ppc64le",
            "HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.7.x86_64",
            "HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.7.src",
            "HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.7.x86_64",
            "HighAvailability-8.4.0.Z.TUS:pcs-snmp-0:0.10.8-1.el8_4.7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "tornado: Tornado Multipart Form-Data Denial of Service"
    }
  ]
}

CVE-2025-46727 (GCVE-0-2025-46727)

Vulnerability from cvelistv5

Published

2025-05-07 23:07

Modified

2025-05-08 14:01

Severity ?

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE

CWE-400 - Uncontrolled Resource Consumption
CWE-770 - Allocation of Resources Without Limits or Throttling

Summary

Rack is a modular Ruby web server interface. Prior to versions 2.2.14, 3.0.16, and 3.1.14, `Rack::QueryParser` parses query strings and `application/x-www-form-urlencoded` bodies into Ruby data structures without imposing any limit on the number of parameters, allowing attackers to send requests with extremely large numbers of parameters. The vulnerability arises because `Rack::QueryParser` iterates over each `&`-separated key-value pair and adds it to a Hash without enforcing an upper bound on the total number of parameters. This allows an attacker to send a single request containing hundreds of thousands (or more) of parameters, which consumes excessive memory and CPU during parsing. An attacker can trigger denial of service by sending specifically crafted HTTP requests, which can cause memory exhaustion or pin CPU resources, stalling or crashing the Rack server. This results in full service disruption until the affected worker is restarted. Versions 2.2.14, 3.0.16, and 3.1.14 fix the issue. Some other mitigations are available. One may use middleware to enforce a maximum query string size or parameter count, or employ a reverse proxy (such as Nginx) to limit request sizes and reject oversized query strings or bodies. Limiting request body sizes and query string lengths at the web server or CDN level is an effective mitigation.

References

►

URL

	Vendor	Product	Version
	rack	rack	Version: < 2.2.14 Version: >= 3.0, < 3.0.16 Version: >= 3.1, < 3.1.14

CVE-2025-47287 (GCVE-0-2025-47287)

Vulnerability from cvelistv5

Published

2025-05-15 21:17

Modified

2025-05-29 06:04

Severity ?

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE

CWE-770 - Allocation of Resources Without Limits or Throttling

Summary

Tornado is a Python web framework and asynchronous networking library. When Tornado's ``multipart/form-data`` parser encounters certain errors, it logs a warning but continues trying to parse the remainder of the data. This allows remote attackers to generate an extremely high volume of logs, constituting a DoS attack. This DoS is compounded by the fact that the logging subsystem is synchronous. All versions of Tornado prior to 6.5.0 are affected. The vulnerable parser is enabled by default. Upgrade to Tornado version 6.50 to receive a patch. As a workaround, risk can be mitigated by blocking `Content-Type: multipart/form-data` in a proxy.

References

►

URL

	Vendor	Product	Version
	tornadoweb	tornado	Version: < 6.5.0

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

rhsa-2025:8323

Vulnerability from csaf_redhat

CVE-2025-46727 (GCVE-0-2025-46727)

Vulnerability from cvelistv5

CVE-2025-47287 (GCVE-0-2025-47287)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature