CVE-2024-1135

Gunicorn no puede validar correctamente los encabezados Transfer-Encoding, lo que genera vulnerabilidades de contrabando de solicitudes HTTP (HRS). Al manipular solicitudes con encabezados Transfer-Encoding conflictivos, los atacantes pueden eludir las restricciones de seguridad y acceder a endpoints restringidos. Este problema se debe al manejo que hace Gunicorn de los encabezados Transfer-Encoding, donde procesa incorrectamente solicitudes con múltiples encabezados Transfer-Encoding conflictivos, tratándolos como fragmentados independientemente de la codificación final especificada. Esta vulnerabilidad permite una variedad de ataques que incluyen envenenamiento de caché, manipulación de sesiones y exposición de datos.

An HTTP Request Smuggling vulnerability was found in Gunicorn. By crafting requests with conflicting Transfer-Encoding headers, attackers can bypass security restrictions and access restricted endpoints. This issue is due to Gunicorn's handling of Transfer-Encoding headers, where it incorrectly processes requests with multiple, conflicting Transfer-Encoding headers, treating them as chunked regardless of the final encoding specified. This vulnerability allows for a range of attacks, including cache poisoning, session manipulation, and data exposure.

An updated version of Red Hat Update Infrastructure is now available. RHUI 4.11 updates Pulp to a newer upstream version, fixes several issues, and adds an enhancement. Issues addressed include HTTP request smuggling, cross site scripting, denial of service, memory exhaustion, null pointer, and remote SQL injection vulnerabilities.