CVE catalog
CVE-2018-16471
ruby-rack: CVE-2018-16471
- Severity
- Medium · CVSS 6.1
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 1.89% · Oct 27, 2026
There is a possible XSS vulnerability in Rack before 2.0.6 and 1.6.11. Carefully crafted requests can impact the data returned by the `scheme` method on `Rack::Request`. Applications that expect the scheme to be limited to 'http' or 'https' and do not escape the return value could be vulnerable to an XSS attack. Note that applications using the normal escaping mechanisms provided by Rails may not impacted, but applications that bypass the escaping mechanisms, or do not use them may be vulnerable.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | ruby-rack | sid | 3.2.7-1 | fixed |
| Debian | ruby-rack | forky | 3.2.7-1 | fixed |
| Debian | ruby-rack | trixie | 3.1.20-0+deb13u1 | fixed |
| Debian | ruby-rack | trixie-security | 3.1.20-0+deb13u2 | fixed |
| Debian | ruby-rack | bookworm | 2.2.22-0+deb12u1 | fixed |
| Debian | ruby-rack | bookworm-security | 2.2.22-0+deb12u2 | fixed |
| Ubuntu | ruby-rack | 16.04 | 1.5.2-4 | vulnerable |
| Ubuntu | ruby-rack | 16.04 | 1.6.4-2 | vulnerable |
| Ubuntu | ruby-rack | 16.04 | 1.6.4-3 | vulnerable |
| Ubuntu | ruby-rack | 16.04 | 1.6.4-3ubuntu0.1 | fixed |
| Ubuntu | ruby-rack | 18.04 | 1.6.4-4 | vulnerable |
| Ubuntu | ruby-rack | 18.04 | 1.6.4-4ubuntu0.1 | fixed |
| Opensuse | rubygem-rack | leap 15.1 | 2.0.8-lp151.3.3.1 | fixed |
| Suse | rubygem-rack | openstack cloud 7 | 1.6.11-3.3.1 | fixed |
| Suse | rubygem-rack | openstack cloud crowbar 8 | 1.6.11-3.3.1 | fixed |
| Suse | rubygem-rack | enterprise storage 4 | 1.6.11-3.3.1 | fixed |
| Ubuntu | ruby-rack | 16.04 | 1.5.2-4 | vulnerable |
| Ubuntu | ruby-rack | 16.04 | 1.6.4-2 | vulnerable |
| Ubuntu | ruby-rack | 16.04 | 1.6.4-3 | vulnerable |
| Ubuntu | ruby-rack | 16.04 | 1.6.4-3ubuntu0.1 | fixed |
| Ubuntu | ruby-rack | 18.04 | 1.6.4-4 | vulnerable |
| Ubuntu | ruby-rack | 18.04 | 1.6.4-4ubuntu0.1 | fixed |
| Suse | rubygem-rack | linux enterprise high availability extension 15 | 2.0.8-3.3.1 | fixed |
| Suse | rubygem-rack | linux enterprise high availability extension 15 sp1 | 2.0.8-3.3.1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | ruby-rack | source | sid | 1.6.4-6 | not yet assigned | Not reported | [913005] |
| Debian | ruby-rack | source | forky | 1.6.4-6 | not yet assigned | Not reported | [913005] |
| Debian | ruby-rack | source | trixie | 1.6.4-6 | not yet assigned | Not reported | [913005] |
| Debian | ruby-rack | source | bookworm | 1.6.4-6 | not yet assigned | Not reported | [913005] |
| Ubuntu | ruby-rack | deb | 16.04 | 1.6.4-3ubuntu0.1 | Not reported | USN-4089-1 | Not reported |
| Ubuntu | ruby-rack | deb | 18.04 | 1.6.4-4ubuntu0.1 | Not reported | USN-4089-1 | Not reported |
| Opensuse | rubygem-rack | rpm | leap 15.1 | 2.0.8-lp151.3.3.1 | Not reported | OPENSUSE-SU-2020:0214-1 | Not reported |
| Suse | rubygem-rack | rpm | openstack cloud 7 | 1.6.11-3.3.1 | Not reported | SUSE-SU-2019:1440-1 | Not reported |
| Suse | rubygem-rack | rpm | openstack cloud crowbar 8 | 1.6.11-3.3.1 | Not reported | SUSE-SU-2019:1440-1 | Not reported |
| Suse | rubygem-rack | rpm | enterprise storage 4 | 1.6.11-3.3.1 | Not reported | SUSE-SU-2019:1440-1 | Not reported |
| Ubuntu | ruby-rack | deb | 16.04 | 1.6.4-3ubuntu0.1 | Not reported | UBUNTU-CVE-2018-16471 | Not reported |
| Ubuntu | ruby-rack | deb | 18.04 | 1.6.4-4ubuntu0.1 | Not reported | UBUNTU-CVE-2018-16471 | Not reported |
| Suse | rubygem-rack | rpm | linux enterprise high availability extension 15 | 2.0.8-3.3.1 | Not reported | SUSE-SU-2020:0359-1 | Not reported |
| Suse | rubygem-rack | rpm | linux enterprise high availability extension 15 sp1 | 2.0.8-3.3.1 | Not reported | SUSE-SU-2020:0359-1 | Not reported |
OpenFactory catalog packages
Matching against OpenFactory catalog package versions is in progress.
[Debian 12 (Bookworm)]
- [ruby-rack]Unknown
Details (4)
2.2.22-0+deb12u1· all · bookwormFixed · Fixed:
1.6.4-6dsa · ruby-rack · debian · bookworm; dsa · ruby-rack · debian · 12
2.2.22-0+deb12u1· all · bookwormFixed · Fixed:
1.6.4-6dsa · ruby-rack · debian · bookworm; dsa · ruby-rack · debian · 12
2.2.22-0+deb12u2· all · bookworm-securityFixed · Fixed:
1.6.4-6dsa · ruby-rack · debian · bookworm; dsa · ruby-rack · debian · 12
2.2.22-0+deb12u2· all · bookworm-securityFixed · Fixed:
1.6.4-6dsa · ruby-rack · debian · bookworm; dsa · ruby-rack · debian · 12
[Debian 13 (Trixie)]
- [ruby-rack]Unknown
Details (5)
3.1.20-0+deb13u1· all · trixieFixed · Fixed:
1.6.4-6dsa · ruby-rack · debian · 13
3.1.20-0+deb13u1· all · trixieFixed · Fixed:
1.6.4-6dsa · ruby-rack · debian · 13
3.1.20-0+deb13u1· all · trixie-securityFixed · Fixed:
1.6.4-6dsa · ruby-rack · debian · 13
3.1.20-0+deb13u1· all · trixie-security · Historical versionFixed · Fixed:
1.6.4-6dsa · ruby-rack · debian · 13
3.1.20-0+deb13u2· all · trixie-securityFixed · Fixed:
1.6.4-6dsa · ruby-rack · debian · 13
Observed:
References
- [https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_10286-1.json]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2018-16471]
- [https://osv.dev/vulnerability/DLA-1585-1]
- [https://osv.dev/vulnerability/SUSE-SU-2019:1440-1]
- [https://osv.dev/vulnerability/SUSE-SU-2020:0359-1]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2018-16471]
- [https://osv.dev/vulnerability/USN-4089-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2020:0214-1]
- [https://security-tracker.debian.org/tracker/CVE-2018-16471]
- [https://security.access.redhat.com/data/csaf/v2/vex/2018/cve-2018-16471.json]
[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]