CVE-2023-27539

Rack 2.0.0 – 2.2.6.4

Published

09 January 2025

Modified

10 October 2025

Patch / advisory

CVSS Score v3.1 5.3

Click a component to see what it means

Raw vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

EPSS Score 0.011 64th percentile

Risk Priority 46 floored blend · peak EPSS

CVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.

Summary

CVE-2023-27539 is a medium-severity an unspecified weakness vulnerability in Rack Rack. Its CVSS base score is 5.3 (Medium).

Operationally, ranked in the top 36% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

There is a denial of service vulnerability in the header parsing component of Rack.

CVE-2024-26146Same product: Debian Debian Linux

CVE-2024-25126Same product: Debian Debian Linux

CVE-2024-26141Same product: Debian Debian Linux

CVE-2023-27530Same product: Debian Debian Linux

CVE-2026-26961Same product: Rack Rack

CVE-2025-59830Same product: Rack Rack

CVE-2026-34786Same product: Rack Rack

CVE-2026-34785Same product: Rack Rack

CVE-2025-32441Same product: Rack Rack

CVE-2026-34830Same product: Rack Rack

rack

2.0.0 — 2.2.6.4 · 3.0.0 — 3.0.6.1

debian

debian linux

10.0, 11.0

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.