CVE-2014-0082: actionpack/lib/action_view/template/text.rb in Action View in Ruby on Rails 3.x before 3.2.17 converts MIME...

Security readout for executives and security teams

CVE-2014-0082 is a denial-of-service issue in Ruby on Rails 3.x before 3.2.17. A remote attacker could cause excessive memory use by sending crafted header values to applications using Rails Action View render :text behavior. The known impact is service availability, not data theft or code execution. Exposure is most likely in legacy Rails 3.x applications or vendor products bundling vulnerable Rails/actionpack versions, especially code paths using render :text. The provided sources do not identify current internet-wide exposure. Treat this as a legacy availability risk. It is not evidenced as actively exploited, but public-facing Rails 3.x systems can be disrupted if unpatched. Prioritize remediation where the application is business-critical or internet-exposed. Mitigation focus: Upgrade Rails/actionpack to version 3.2.17 or later where applicable.; Apply vendor package updates from Red Hat, SUSE, Puppet, Chef, or relevant distributors.; Prioritize applications with public routes using render :text..

Prepared

Jun 14, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.