Summary
It was discovered that WEBrick incorrectly handled having both a Content-
Length header and a Transfer-Encoding header. A remote attacker could
possibly use this issue to perform a HTTP request smuggling attack.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 24.04 LTS 24.04:LTS | ruby-webrick | 1.8.1-1ubuntu0.1 |
Vulnerabilities 1
-
High 7.5CVE-2024-47220 Rejected
HTTP Request Smuggling in ruby webrick
DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
References
-
report
https://ubuntu.com/security/CVE-2024-47220