Lucene search
Veracode Vulnerability DatabaseVERACODE:42888HistoryAug 22, 2023 - 2:17 p.m.
HTTP Request Smuggling
2023-08-2214:17:09
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
puma
vulnerability
http request smuggling
zero-length content-length
chunked transfer encoding
0.003 Low
EPSS
Percentile
64.9%
puma is vulnerable to HTTP Request Smuggling. The vulnerability exists due to processing zero-length content-Length headers and chunked transfer encoding bodies in client.rb, allowing an attacker to smuggle HTTP requests.
References
github.com/puma/puma/commit/690155e7d644b80eeef0a6094f9826ee41f1080a
github.com/puma/puma/commit/7405a219801dcebc0ad6e0aa108d4319ca23f662
github.com/puma/puma/commit/ed0f2f94b56982c687452504b95d5f1fbbe3eed1
github.com/puma/puma/releases/tag/v5.6.7
github.com/puma/puma/releases/tag/v6.3.1
github.com/puma/puma/security/advisories/GHSA-68xg-gqqm-vgj8
github.com/rubysec/ruby-advisory-db/blob/master/gems/puma/CVE-2023-40175.yml
Related
ubuntu
ubuntu
Puma vulnerability
2023-09-27 00:00:00
Puma vulnerabilities
2024-03-07 00:00:00
debiancve
debiancve
CVE-2023-40175
2023-08-18 22:15:11
ubuntucve
ubuntucve
CVE-2023-40175
2023-08-18 00:00:00
cvelist
cvelist
CVE-2023-40175 Inconsistent Interpretation of HTTP Requests in puma
2023-08-18 21:35:47
github
github
Puma HTTP Request/Response Smuggling vulnerability
2023-08-18 21:50:05
nessus
nessus
Ubuntu 23.04 : Puma vulnerability (USN-6399-1)
2023-09-27 00:00:00
Fedora 40 : rubygem-puma (2024-c393b8b2fb)
2024-04-29 00:00:00
prion
prion
Design/Logic Flaw
2023-08-18 22:15:00
osv
osv
CVE-2023-40175
2023-08-18 22:15:11
Puma HTTP Request/Response Smuggling vulnerability
2023-08-18 21:50:05
puma vulnerabilities
2024-03-07 14:00:06
cve
cve
CVE-2023-40175
2023-08-18 22:15:11
openvas
openvas
Ubuntu: Security Advisory (USN-6399-1)
2023-09-27 00:00:00
openSUSE: Security Advisory for rubygem (SUSE-SU-2023:3957-1)
2024-03-04 00:00:00
Ubuntu: Security Advisory (USN-6682-1)
2024-03-08 00:00:00
redhatcve
redhatcve
CVE-2023-40175
2023-08-22 17:50:39
redhat
redhat
(RHSA-2024:0797) Important: Satellite 6.14.2 Async Security Update
2024-02-13 14:38:17