SB2024030762 - Ubuntu update for puma

Description

This security bulletin contains information about 6 secuirty vulnerabilities.

1) Inconsistent interpretation of HTTP requests (CVE-ID: CVE-2020-11076)

The vulnerability allows a remote attacker to perform HTTP request smuggling attack.

The vulnerability exists due to improper input validation in the Transfer-Encoding Header. A remote attacker can send a specially crafted HTTP request and perform HTTP request smuggling attack.

2) Inconsistent interpretation of HTTP requests (CVE-ID: CVE-2020-11077)

The vulnerability allows a remote attacker to perform HTTP request smuggling attack.

The vulnerability exists due to improper input validation. A remote attacker can send a specially crafted HTTP request and perform HTTP request smuggling attack.

3) Information disclosure (CVE-ID: CVE-2022-23634)

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to puma may not always call close on the response body. A remote attacker can gain unauthorized access to sensitive information.

4) Inconsistent interpretation of HTTP requests (CVE-ID: CVE-2022-24790)

The vulnerability allows a remote attacker to preform HTTP request smuggling attacks.

The vulnerability exists due to improper validation of HTTP requests. A remote attacker can send a specially crafted HTTP request to the server and smuggle arbitrary HTTP headers.

Successful exploitation of vulnerability may allow an attacker to poison HTTP cache and perform phishing attacks.

5) Inconsistent interpretation of HTTP requests (CVE-ID: CVE-2023-40175)

The vulnerability allows a remote attacker to perform HTTP request smuggling attacks.

The vulnerability exists due to improper validation of HTTP requests when parsing chunked transfer encoding bodies and zero-length Content-Length headers. A remote attacker can send a specially crafted HTTP request to the server and smuggle arbitrary HTTP headers.

Successful exploitation of vulnerability may allow an attacker to poison HTTP cache and perform phishing attacks.

6) Inconsistent interpretation of HTTP requests (CVE-ID: CVE-2024-21647)

The vulnerability allows a remote attacker to perform HTTP request smuggling attacks.

The vulnerability exists due to improper validation of HTTP requests when parsing chunked transfer encoding bodies. A remote attacker can send a specially crafted HTTP request to the server and smuggle arbitrary HTTP headers.

Successful exploitation of vulnerability may allow an attacker to poison HTTP cache and perform phishing attacks.

Remediation

Install update from vendor's website.

References

• https://ubuntu.com/security/notices/USN-6682-1