{"id":"USN-6597-1","aliases":[],"status":"published","title":"puma vulnerability","description":"It was discovered that Puma incorrectly handled parsing chunked transfer\nencoding bodies. A remote attacker could possibly use this issue to cause\nPuma to consume resources, leading to a denial of service.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2024-01-25T12:38:55.381253Z","modified":"2026-02-04T04:13:55Z","fixes":[{"ecosystem":"Ubuntu:23.10","package":"puma","fixed_in":["5.6.5-4ubuntu2.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Ubuntu:23.10","package":"puma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.5-4ubuntu2.1"}]}],"versions":["5.6.5-3ubuntu1","5.6.5-4ubuntu1","5.6.5-4ubuntu2"]}],"references":[{"url":"https://ubuntu.com/security/notices/USN-6597-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-21647","tags":["report"]}],"sources":{"osv":[{"id":"USN-6597-1","title":"puma vulnerability","description":"It was discovered that Puma incorrectly handled parsing chunked transfer\nencoding bodies. A remote attacker could possibly use this issue to cause\nPuma to consume resources, leading to a denial of service.\n","status":"published","published":"2024-01-25T12:38:55.381253Z","modified":"2026-02-04T04:13:55.133691Z","updated_at":"2026-11-02T16:58:17.305935Z"}]}}