Lucene search
PRIOn knowledge basePRION:CVE-2024-21647HistoryJan 08, 2024 - 2:15 p.m.
Design/Logic Flaw
2024-01-0814:15:00
PRIOn knowledge base
www.prio-n.com
5
puma server
http request smuggling
version 6.4.2
version 5.6.8
vulnerability
Puma is a web server for Ruby/Rack applications built for parallelism. Prior to version 6.4.2, puma exhibited incorrect behavior when parsing chunked transfer encoding bodies in a way that allowed HTTP request smuggling. Fixed versions limits the size of chunk extensions. Without this limit, an attacker could cause unbounded resource (CPU, network bandwidth) consumption. This vulnerability has been fixed in versions 6.4.2 and 5.6.8.
Related
cgr
cgr
CVE-2024-21647 vulnerabilities
2024-05-19 03:07:16
ubuntu
ubuntu
Puma vulnerability
2024-01-25 00:00:00
Puma vulnerabilities
2024-03-07 00:00:00
cvelist
cvelist
CVE-2024-21647 HTTP Request/Response Smuggling in puma
2024-01-08 13:45:27
nvd
nvd
CVE-2024-21647
2024-01-08 14:15:47
osv
osv
Puma HTTP Request/Response Smuggling vulnerability
2024-01-08 15:56:48
puma vulnerability
2024-01-25 12:38:55
CVE-2024-21647
2024-01-08 14:15:47
nessus
nessus
Ubuntu 23.04 / 23.10 : Puma vulnerability (USN-6597-1)
2024-01-25 00:00:00
Fedora 40 : rubygem-puma (2024-c393b8b2fb)
2024-04-29 00:00:00
Ubuntu 20.04 LTS / 22.04 LTS : Puma vulnerabilities (USN-6682-1)
2024-03-07 00:00:00
debiancve
debiancve
CVE-2024-21647
2024-01-08 14:15:47
ubuntucve
ubuntucve
CVE-2024-21647
2024-01-08 00:00:00
redhatcve
redhatcve
CVE-2024-21647
2024-01-08 22:34:31
veracode
veracode
HTTP Request Smuggling
2024-01-09 07:22:47
github
github
Puma HTTP Request/Response Smuggling vulnerability
2024-01-08 15:56:48
wolfi
wolfi
CVE-2024-21647 vulnerabilities
2024-07-06 03:08:40
openvas
openvas
Ubuntu: Security Advisory (USN-6597-1)
2024-01-26 00:00:00
Ubuntu: Security Advisory (USN-6682-1)
2024-03-08 00:00:00
cve
cve
CVE-2024-21647
2024-01-08 14:15:47
ibm
ibm
redhat
redhat
(RHSA-2024:2010) Important: Satellite 6.15.0 release
2024-04-23 17:00:52