Inconsistent interpretation of HTTP requests in Puma - CVE-2021-41136

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU63634

Inconsistent interpretation of HTTP requests in Puma - CVE-2021-41136

Published: May 25, 2022 / Updated: May 25, 2022


Vulnerability identifier: #VU63634
CSH Severity: Medium
CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2021-41136
CWE-ID: CWE-444
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to preform HTTP request smuggling attacks.

The vulnerability exists due to improper validation of HTTP requests. A remote attacker can send a specially crafted HTTP header values which contain the LF character to the server and smuggle arbitrary HTTP headers.

Successful exploitation of vulnerability may allow an attacker to poison HTTP cache and perform phishing attacks.


Affected software

Puma
puma (Debian package)
python-Django
ruby2.1-rubygem-puma
ruby2.1-rubygem-puma-debuginfo
rubygem-puma-debugsource
ruby2.1-rubygem-redcarpet
ruby2.1-rubygem-redcarpet-debuginfo
rubygem-redcarpet-debugsource
rubygem-puma-doc
rubygem-puma
rubygem-puma-debuginfo
documentation-hpe-helion-openstack-opsconsole
documentation-hpe-helion-openstack-user
documentation-hpe-helion-openstack-security
documentation-hpe-helion-openstack-planning
documentation-hpe-helion-openstack-operations
documentation-hpe-helion-openstack-installation
documentation-suse-openstack-cloud-user
documentation-suse-openstack-cloud-security
documentation-suse-openstack-cloud-planning
documentation-suse-openstack-cloud-opsconsole
documentation-suse-openstack-cloud-operations
documentation-suse-openstack-cloud-installation
documentation-suse-openstack-cloud-upstream-user
documentation-suse-openstack-cloud-upstream-admin
documentation-suse-openstack-cloud-supplement
documentation-suse-openstack-cloud-deployment
SUSE OpenStack Cloud Crowbar
SUSE OpenStack Cloud
HPE Helion Openstack
openEuler

How to mitigate CVE-2021-41136

Install updates from vendor's website.

Puma - addressed in versions 4.3.9, 5.5.1
puma (Debian package) - update to 4.3.8-1+deb11u2
python-Django - update to 1.11.29-3.28.1
ruby2.1-rubygem-puma - update to 2.16.0-3.15.1
ruby2.1-rubygem-puma-debuginfo - update to 2.16.0-3.15.1
rubygem-puma-debugsource - update to 2.16.0-3.15.1
ruby2.1-rubygem-redcarpet - update to 3.2.3-3.3.1
ruby2.1-rubygem-redcarpet-debuginfo - update to 3.2.3-3.3.1
rubygem-redcarpet-debugsource - update to 3.2.3-3.3.1
rubygem-puma-doc - update to 3.12.6-3
rubygem-puma - update to 3.12.6-3
rubygem-puma-debuginfo - update to 3.12.6-3
rubygem-puma-debugsource - update to 3.12.6-3
documentation-hpe-helion-openstack-opsconsole - update to 8.20210806-1.35.1
documentation-hpe-helion-openstack-user - update to 8.20210806-1.35.1
documentation-hpe-helion-openstack-security - update to 8.20210806-1.35.1
documentation-hpe-helion-openstack-planning - update to 8.20210806-1.35.1
documentation-hpe-helion-openstack-operations - update to 8.20210806-1.35.1
documentation-hpe-helion-openstack-installation - update to 8.20210806-1.35.1
documentation-suse-openstack-cloud-user - update to 8.20210806-1.35.1
documentation-suse-openstack-cloud-security - update to 8.20210806-1.35.1
documentation-suse-openstack-cloud-planning - update to 8.20210806-1.35.1
documentation-suse-openstack-cloud-opsconsole - update to 8.20210806-1.35.1
documentation-suse-openstack-cloud-operations - update to 8.20210806-1.35.1
documentation-suse-openstack-cloud-installation - update to 8.20210806-1.35.1
documentation-suse-openstack-cloud-upstream-user - update to 8.20210806-1.35.1
documentation-suse-openstack-cloud-upstream-admin - update to 8.20210806-1.35.1
documentation-suse-openstack-cloud-supplement - update to 8.20210806-1.35.1
documentation-suse-openstack-cloud-deployment - update to 8.20210806-1.35.1

External References

Related Security Bulletins