CVE-2013-0183
Rack rubygems receiving excessively long lines triggers out-of-memory error
CVE-2013-0183 is a medium vulnerability (CVSS 5.0) in Rack Project Rack, published March 1, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.78%, the 89th percentile. Fixed in rack 1.3.8.
multipart/parser.rb in Rack 1.3.x before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to cause a denial of service (memory consumption and out-of-memory error) via a long string in a Multipart HTTP packet.
Exploit likelihood
What each source reports
NVD Score used
multipart/parser.rb in Rack 1.3.x before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to cause a denial of service (memory consumption and out-of-memory error) via a long string in a Multipart HTTP packet.
- Record
CVE-2013-0183- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
multipart/parser.rb in Rack 1.3.x before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to cause a denial of service (memory consumption and out-of-memory error) via a long string in a Multipart HTTP packet.
- Record
CVE-2013-0183- Updated
- 2026-11-02
EUVDEUVD-2017-0158 No score
multipart/parser.rb in Rack 1.3.x before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to cause a denial of service (memory consumption and out-of-memory error) via a long string in a Multipart HTTP packet.
- Record
EUVD-2017-0158- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3pxh-h8hw-mj8w No score
Rack rubygems receiving excessively long lines triggers out-of-memory error
multipart/parser.rb in Rack 1.3.x before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to cause a denial of service (memory consumption and out-of-memory error) via a long string in a Multipart HTTP packet.
- Record
GHSA-3pxh-h8hw-mj8w- Weakness
- CWE-119, CWE-400
- Updated
- 2026-11-02
OSV No score
multipart/parser.rb in Rack 1.3.x before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to cause a denial of service (memory consumption and out-of-memory error) via a long string in a Multipart HTTP packet.
- Record
CVE-2013-0183- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-0183 No score
multipart/parser.rb in Rack 1.3.x before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to cause a denial of service (memory consumption and out-of-memory error) via a long string in a Multipart HTTP packet.
- Record
DEBIAN-CVE-2013-0183- Updated
- 2026-11-02
OSVGHSA-3pxh-h8hw-mj8w No score
Rack rubygems receiving excessively long lines triggers out-of-memory error
multipart/parser.rb in Rack 1.3.x before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to cause a denial of service (memory consumption and out-of-memory error) via a long string in a Multipart HTTP packet.
- Record
GHSA-3pxh-h8hw-mj8w- Weakness
- CWE-119, CWE-400
- Updated
- 2026-11-02
OSVUBUNTU-CVE-2013-0183 No score
multipart/parser.rb in Rack 1.3.x before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to cause a denial of service (memory consumption and out-of-memory error) via a long string in a Multipart HTTP packet.
- Record
UBUNTU-CVE-2013-0183- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
rackRubyGems |
1.3.0 up to 1.3.8 | 1.3.8 |
rackRubyGems |
1.4.0 up to 1.4.3 | 1.4.3 |
ruby-rackDebian:12 |
before 1.4.1-2.1 | 1.4.1-2.1 |
ruby-rackDebian:13 |
before 1.4.1-2.1 | 1.4.1-2.1 |
ruby-rackDebian:14 |
before 1.4.1-2.1 | 1.4.1-2.1 |
librack-rubyDebian:6.0 |
before 1.1.0-4+squeeze1, plus listed versions 1.1.0-4 |
1.1.0-4+squeeze1 |
rackRubyGems |
1.3.0 up to 1.3.8, plus listed versions 1.3.11.3.21.3.31.3.41.3.51.3.61.3.7 |
1.3.8 |
rackRubyGems |
1.4.0 up to 1.4.3, plus listed versions 1.4.11.4.2 |
1.4.3 |
ruby-rackUbuntu:14.04:LTS |
before 1.5.2-1 | 1.5.2-1 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
github.com/rack/rack/commit/548b9af2dc0059f4c0c19728624448d84de450ff
bugzilla.redhat.com/show_bug.cgi?id=895282
rack.github.com
groups.google.com/forum
lists.opensuse.org/opensuse-updates/2013-03/msg00048.html
rhn.redhat.com/errata/RHSA-2013-0548.html
Show 12 moreShow less
debian.org/security/2013/dsa-2783
nvd.nist.gov/vuln/detail/CVE-2013-0183
access.redhat.com/errata/RHSA-2013:0544
security-tracker.debian.org/tracker/CVE-2013-0183
ubuntu.com/security/CVE-2013-0183
cve.org/CVERecord?id=CVE-2013-0183