CVE-2025-61772: Rack's multipart parser buffers unbounded per-part headers, enabling DoS (memory exhaustion)
(updated )
Rack::Multipart::Parser can accumulate unbounded data when a multipart part’s header block never terminates with the required blank line (CRLFCRLF). The parser keeps appending incoming bytes to memory without a size cap, allowing a remote attacker to exhaust memory and cause a denial of service (DoS).
References
- github.com/advisories/GHSA-wpv5-97wm-hp9c
- github.com/rack/rack
- github.com/rack/rack/commit/589127f4ac8b5cf11cf88fb0cd116ffed4d2181e
- github.com/rack/rack/commit/d869fed663b113b95a74ad53e1b5cae6ab31f29e
- github.com/rack/rack/commit/e08f78c656c9394d6737c022bde087e0f33336fd
- github.com/rack/rack/security/advisories/GHSA-wpv5-97wm-hp9c
- github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2025-61772.yml
- nvd.nist.gov/vuln/detail/CVE-2025-61772
Code Behaviors & Features
Detect and mitigate CVE-2025-61772 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →