CVE-2020-11076HTTP Request Smuggling in Puma

Severity
7.5HIGHNVD
EPSS
1.8%
top 17.25%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedMay 22
Latest updateMar 7

Description

In Puma (RubyGem) before 4.3.4 and 3.12.5, an attacker could smuggle an HTTP response, by using an invalid transfer-encoding header. The problem has been fixed in Puma 3.12.5 and Puma 4.3.4.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages7 packages

CVEListV5puma/puma< 3.12.6+1
NVDpuma/puma3.0.03.12.6+1
RubyGemspuma/puma4.0.04.3.4+1
debiandebian/puma< puma 4.3.6-1 (bookworm)
Debianpuma/puma< 4.3.6-1+3

Also affects: Debian Linux 9.0, Fedora 33

Patches

🔴Vulnerability Details

5
OSV
puma vulnerabilities2024-03-07
OSV
CVE-2020-11077: In Puma (RubyGem) before 42020-05-22
GHSA
HTTP Smuggling via Transfer-Encoding Header in Puma2020-05-22
OSV
CVE-2020-11076: In Puma (RubyGem) before 42020-05-22
OSV
HTTP Smuggling via Transfer-Encoding Header in Puma2020-05-22

📋Vendor Advisories

5
Ubuntu
Puma vulnerabilities2024-03-07
Red Hat
rubygem-puma: HTTP Smuggling via an invalid Transfer-Encoding Header2020-05-21
Red Hat
rubygem-puma: HTTP Smuggling through a proxy via Transfer-Encoding Header2020-05-21
Debian
CVE-2020-11077: puma - In Puma (RubyGem) before 4.3.5 and 3.12.6, a client could smuggle a request thro...2020
Debian
CVE-2020-11076: puma - In Puma (RubyGem) before 4.3.4 and 3.12.5, an attacker could smuggle an HTTP res...2020

💬Community

3
Bugzilla
CVE-2020-11077 rubygem-puma: HTTP Smuggling through a proxy via Transfer-Encoding Header2020-06-01
Bugzilla
CVE-2020-11076 rubygem-puma: HTTP Smuggling via an invalid Transfer-Encoding Header2020-06-01
Bugzilla
CVE-2020-11076 rubygem-puma: HTTP Smuggling via an invalid Transfer-Encoding Header [fedora-all]2020-06-01