CVE-2020-11076
HTTP Smuggling via Transfer-Encoding Header in Puma
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
1Exploited in Wild
-Decision
Descriptions
In Puma (RubyGem) before 4.3.4 and 3.12.5, an attacker could smuggle an HTTP response, by using an invalid transfer-encoding header. The problem has been fixed in Puma 3.12.5 and Puma 4.3.4.
En Puma (RubyGem) versiones anteriores a 4.3.4 y 3.12.5, un atacante podría hacer pasar sin autorización una respuesta HTTP, mediante el uso de un encabezado de codificación transfer no válido. El problema ha sido corregido en Puma versión 3.12.5 y Puma versión 4.3.4.
ZeddYu Lu discovered that Puma incorrectly handled parsing certain headers. A remote attacker could possibly use this issue to perform an HTTP Request Smuggling attack. This issue only affected Ubuntu 20.04 LTS. It was discovered that Puma incorrectly handled parsing certain headers. A remote attacker could possibly use this issue to perform an HTTP Request Smuggling attack. This issue only affected Ubuntu 20.04 LTS.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2020-03-30 CVE Reserved
- 2020-05-22 CVE Published
- 2020-05-23 First Exploit
- 2024-08-04 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-444: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
CAPEC
References (8)
| URL | Tag | Source |
|---|---|---|
| https://github.com/puma/puma/blob/master/History.md#434435-and-31253126--2020-05-22 | Release Notes | |
| https://github.com/puma/puma/security/advisories/GHSA-x7jg-6pwg-fx5h | Third Party Advisory | |
| https://lists.debian.org/debian-lts-announce/2020/10/msg00009.html | Mailing List |
|
| URL | Date | SRC |
|---|---|---|
| https://github.com/dentarg/cougar | 2020-05-23 |
| URL | Date | SRC |
|---|---|---|
| https://github.com/puma/puma/commit/f24d5521295a2152c286abb0a45a1e1e2bd275bd | 2023-11-07 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Puma Search vendor "Puma" | Puma Search vendor "Puma" for product "Puma" | >= 3.0.0 < 3.12.6 Search vendor "Puma" for product "Puma" and version " >= 3.0.0 < 3.12.6" | ruby |
Affected
| ||||||
| Puma Search vendor "Puma" | Puma Search vendor "Puma" for product "Puma" | >= 4.0.0 < 4.3.5 Search vendor "Puma" for product "Puma" and version " >= 4.0.0 < 4.3.5" | ruby |
Affected
| ||||||
| Fedoraproject Search vendor "Fedoraproject" | Fedora Search vendor "Fedoraproject" for product "Fedora" | 33 Search vendor "Fedoraproject" for product "Fedora" and version "33" | - |
Affected
| ||||||
| Debian Search vendor "Debian" | Debian Linux Search vendor "Debian" for product "Debian Linux" | 9.0 Search vendor "Debian" for product "Debian Linux" and version "9.0" | - |
Affected
| ||||||