CVE-2025-26803
The http parser in Phusion Passenger 6.0.21 through 6.0.25 before 6.0.26 allows a denial of service during parsing of a request with an invalid HTTP m...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
The http parser in Phusion Passenger 6.0.21 through 6.0.25 before 6.0.26 allows a denial of service during parsing of a request with an invalid HTTP method.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
passenger-nginx-module
[{"type":"SEMVER","events":[{"introduced":"6.0.21"},{"fixed":"6.0.26"}]}]
Bitnami
passenger-apache-module
[{"type":"SEMVER","events":[{"introduced":"6.0.21"},{"fixed":"6.0.26"}]}]
Bitnami
passenger
[{"type":"SEMVER","events":[{"introduced":"6.0.21"},{"fixed":"6.0.26"}]}]
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2025-26803 passenger Corrigé dans: 6.0.26+ds-1
- Ubuntu UBUNTU-CVE-2025-26803 passenger
Références
- advisory nvd.nist.gov
- advisory github.com
- patch github.com
- web blog.phusion.nl
- web github.com
- web github.com
- web phusionpassenger.com