Skip to content
OpenAdvisories
Medium USN-7709-1 1 CVE

ruby-webrick vulnerability

Published Aug 21, 2025 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

It was discovered that WEBrick incorrectly parsed HTTP headers. In
configurations where WEBrick is placed behind an HTTP proxy, a remote
attacker could possibly use this issue to perform an HTTP Request Smuggling
attack.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS ruby-webrick 1.7.0-3ubuntu0.2
Ubuntu · 24.04 LTS 24.04:LTS ruby-webrick 1.8.1-1ubuntu0.2

Vulnerabilities 1

  • Medium 6.5
    CVE-2025-6442

    Ruby WEBrick read_header HTTP Request Smuggling Vulnerability

    Ruby WEBrick read_header HTTP Request Smuggling Vulnerability. This vulnerability allows remote attackers to smuggle arbitrary HTTP requests on affected installations of Ruby WEBrick. This issue is exploitable when the product is deployed behind an HTTP proxy…

    ruby WEBrick ruby2.3 ruby2.5 Debian Ubuntu Azure Linux RubyGems

References

  • report
    https://ubuntu.com/security/CVE-2025-6442