GHSA-Q28M-8XJW-8VR5 Puma's Keepalive Connections Causing Denial Of Service

This vulnerability is related to CVE-2019-16770. Impact The fix for CVE-2019-16770 was incomplete. The original fix only protected existing connections that had already been accepted from having their requests starved by greedy persistent-connections saturating all threads in the same process...

PT-2021-4448 · Nginx +5 · Nginx +5

Name of the Vulnerable Software and Affected Versions: Puma versions prior to 4.3.8 Puma versions prior to 5.3.1 Description: The issue is related to an incomplete fix for a previous problem, which allowed greedy persistent-connections to saturate all threads in the cluster, potentially starving...

Puma 资源管理错误漏洞

Puma is a web server for highly concurrent applications by Evan Phoenix, an individual developer in the United States. A security vulnerability exists in Puma. The vulnerability stems from a persistent connection in the program that saturates all threads in all processes in a cluster...