Puma 资源管理错误漏洞

漏洞信息详情

Puma是美国Evan Phoenix个人开发者的一款针对高并发应用的Web服务器。

Puma 存在安全漏洞。该漏洞源于程序中的持久连接会使群集中所有进程中的所有线程饱和。

目前厂商已发布升级补丁以修复漏洞，补丁获取链接：

https://github.com/puma/puma/security/advisories/GHSA-q28m-8xjw-8vr5

来源:MISC

链接:https://gist.github.com/nateberkopec/4b3ea5676c0d70cbb37c82d54be25837

来源:MISC

链接:https://github.com/puma/puma/security/policy

来源:MISC

链接:https://rubygems.org/gems/puma

来源:CONFIRM

链接:https://github.com/puma/puma/security/advisories/GHSA-q28m-8xjw-8vr5

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.2971

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.3919

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.2788

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/164991/Red-Hat-Security-Advisory-2021-4702-01.html

暂无