The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01586-2 advisory.

    - CVE-2025-46727: possible memory exhaustion due to unbounded parameter parsing in Rack::QueryParser     (bsc#1242894).
    - CVE-2025-32441: deleted sessions can be restored and occupied by unauthenticated users when the     Rack::Session::Pool       middleware is being used (bsc#1242899).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02429-1 advisory.

    - Update to version 2.23
    - CVE-2025-46727: Fixed Unbounded-Parameter DoS in Rack:QueryParser. (bsc#1242893)
    - CVE-2025-32441: Fixed a bug where simultaneous rack requests can restore a deleted rack session.
    (bsc#1242898)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2025-203b7db566 advisory.

    https://fedoraproject.org/wiki/Changes/Ruby_on_Rails_8.0

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01586-1 advisory.

    - CVE-2025-46727: possible memory exhaustion due to unbounded parameter parsing in Rack::QueryParser     (bsc#1242894).
    - CVE-2025-32441: deleted sessions can be restored and occupied by unauthenticated users when the     Rack::Session::Pool       middleware is being used (bsc#1242899).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02330-1 advisory.

    - Update to version 2.23
    - CVE-2025-46727: Fixed Unbounded-Parameter DoS in Rack:QueryParser. (bsc#1242893)
    - CVE-2025-32441: Fixed a bug where simultaneous rack requests can restore a deleted rack session.
    (bsc#1242898)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02329-1 advisory.

    - Update to version 2.23
    - CVE-2025-46727: Fixed Unbounded-Parameter DoS in Rack:QueryParser. (bsc#1242893)
    - CVE-2025-32441: Fixed a bug where simultaneous rack requests can restore a deleted rack session.
    (bsc#1242898)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02564-1 advisory.

    - Update to version 2.23
    - CVE-2025-46727: Fixed Unbounded-Parameter DoS in Rack:QueryParser. (bsc#1242893)
    - CVE-2025-32441: Fixed a bug where simultaneous rack requests can restore a deleted rack session.
    (bsc#1242898)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 / 25.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7507-1 advisory.

    It was discovered that Rack incorrectly handled deleted rack sessions. An attacker could possibly use this     issue to expose sensitive information or to gain unauthorized access to user accounts. (CVE-2025-32441)

    It was discovered that Rack incorrectly limited the number of parameters in a web request. An attacker     could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 20.04 LTS,     Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 24.10, and Ubuntu 25.04. (CVE-2025-46727)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
237782	SUSE SLES15 Security Update : rubygem-rack (SUSE-SU-2025:01586-2)	Nessus	SuSE Local Security Checks	6/5/2025	6/5/2025	medium
242538	SUSE SLES15 Security Update : rmt-server (SUSE-SU-2025:02429-1)	Nessus	SuSE Local Security Checks	7/22/2025	7/22/2025	medium
242193	Fedora 43 : rubygem-actioncable / rubygem-actionmailbox / rubygem-actionmailer / etc (2025-203b7db566)	Nessus	Fedora Local Security Checks	7/16/2025	7/16/2025	low
237086	SUSE SLES15 / openSUSE 15 Security Update : rubygem-rack (SUSE-SU-2025:01586-1)	Nessus	SuSE Local Security Checks	5/22/2025	5/22/2025	medium
242212	SUSE SLES15 Security Update : rmt-server (SUSE-SU-2025:02330-1)	Nessus	SuSE Local Security Checks	7/17/2025	7/17/2025	medium
242223	SUSE SLES15 Security Update : rmt-server (SUSE-SU-2025:02329-1)	Nessus	SuSE Local Security Checks	7/17/2025	7/17/2025	medium
243264	SUSE SLES15 / openSUSE 15 Security Update : rmt-server (SUSE-SU-2025:02564-1)	Nessus	SuSE Local Security Checks	8/1/2025	8/6/2025	medium
236870	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 / 25.04 : Rack vulnerabilities (USN-7507-1)	Nessus	Ubuntu Local Security Checks	5/16/2025	5/16/2025	medium

Detections

Analytics

Plugins Search

medium

medium

low

medium

medium

medium

medium

medium