CVE-2020-11076
22.05.2020, 15:15
In Puma (RubyGem) before 4.3.4 and 3.12.5, an attacker could smuggle an HTTP response, by using an invalid transfer-encoding header. The problem has been fixed in Puma 3.12.5 and Puma 4.3.4.
| Vendor | Product | Version |
|---|---|---|
| puma | puma | 3.0.0 ≤ 𝑥 < 3.12.6 |
| puma | puma | 4.0.0 ≤ 𝑥 < 4.3.5 |
| debian | debian_linux | 9.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
References