CVE & CISA-KEV Catalog
CVE-2024-47220
UNSCOREDDescription
An issue was discovered in the WEBrick toolkit through 1.8.1 for Ruby. It allows HTTP request smuggling by providing both a Content-Length header and a Transfer-Encoding header, e.g., "GET /admin HTTP/1.1\r\n" inside of a "POST /user HTTP/1.1\r\n" request. NOTE: the supplier's position is "Webrick should not be used in production."
How to fix
Remediation Available
ruby-webrickDebian
Fixed in:1.9.1-1CVE-2024-47220
Fixed in:1.9.1-1CVE-2024-47220
openshiftRocky
Fixed in:logging/vector-rhel9@sha256:8d570ea2e7f197a56dab73f36728c8afd66a2f886458444a37cb5d7f603ca2e2_amd64RHSA-2025:1227
Fixed in:logging/eventrouter-rhel9@sha256:a64fff60352252e6f0200e8f041f3216bad06320c95c6840da2e9c51fcab480c_amd64RHSA-2025:1227
Fixed in:logging/fluentd-rhel9@sha256:67927403108d96de2c1611c578a17e32afa8c6dadf62a96d3378efc16bd20396_amd64RHSA-2025:1227
Fixed in:logging/vector-rhel9@sha256:85a2ee2d4df59d237ebb12c7700ed0b6439c1330aae341c3909f56de73128d66_s390xRHSA-2025:1227
Fixed in:logging/fluentd-rhel9@sha256:ff369dce86ef0a6dc6fd0f9a84c191f5fc5551d5fa80bf06017cc97c134b8218_s390xRHSA-2025:1227
Fixed in:logging/eventrouter-rhel9@sha256:62a3fb23bd1d405a87d94a9a93ad2b3dd1d44d9eb2d062cf40cb48469e2fe754_s390xRHSA-2025:1227
Fixed in:logging/vector-rhel9@sha256:46a7a38202e74ffcd0c64be726ee0a05ca61b0b3d8676fffc9b2156da8cfcf11_arm64RHSA-2025:1227
Fixed in:logging/fluentd-rhel9@sha256:e15eecf4b824e54f22facd4468460d50718cf8c493370d7486cc3b22e3be1545_arm64RHSA-2025:1227
Fixed in:logging/eventrouter-rhel9@sha256:f937390944ecd159bca06b91289e847a00a3949c29823e8a9f9490cf2aaa5671_arm64RHSA-2025:1227
Fixed in:logging/eventrouter-rhel9@sha256:cfdb5836eb9828b86977aec2186906bc9c12b80eca4ab066ca13e542d797f921_ppc64leRHSA-2025:1227
Fixed in:logging/fluentd-rhel9@sha256:d0516cdb390b87797550ccd54b92d8986c1742f405f8b894df7b61a474801a68_ppc64leRHSA-2025:1227
Fixed in:logging/vector-rhel9@sha256:dbb2f1221cec4aec7349496fae6f5136012eedfe4c54751fee25e68da7cd0ed1_ppc64leRHSA-2025:1227
openshiftRed Hat / RHEL
Fixed in:logging/vector-rhel9@sha256:dbb2f1221cec4aec7349496fae6f5136012eedfe4c54751fee25e68da7cd0ed1_ppc64leRHSA-2025:1227
Fixed in:logging/eventrouter-rhel9@sha256:a64fff60352252e6f0200e8f041f3216bad06320c95c6840da2e9c51fcab480c_amd64RHSA-2025:1227
Fixed in:logging/fluentd-rhel9@sha256:67927403108d96de2c1611c578a17e32afa8c6dadf62a96d3378efc16bd20396_amd64RHSA-2025:1227
Fixed in:logging/vector-rhel9@sha256:8d570ea2e7f197a56dab73f36728c8afd66a2f886458444a37cb5d7f603ca2e2_amd64RHSA-2025:1227
Fixed in:logging/eventrouter-rhel9@sha256:f937390944ecd159bca06b91289e847a00a3949c29823e8a9f9490cf2aaa5671_arm64RHSA-2025:1227
Fixed in:logging/fluentd-rhel9@sha256:e15eecf4b824e54f22facd4468460d50718cf8c493370d7486cc3b22e3be1545_arm64RHSA-2025:1227
Fixed in:logging/vector-rhel9@sha256:46a7a38202e74ffcd0c64be726ee0a05ca61b0b3d8676fffc9b2156da8cfcf11_arm64RHSA-2025:1227
Fixed in:logging/eventrouter-rhel9@sha256:cfdb5836eb9828b86977aec2186906bc9c12b80eca4ab066ca13e542d797f921_ppc64leRHSA-2025:1227
Fixed in:logging/eventrouter-rhel9@sha256:62a3fb23bd1d405a87d94a9a93ad2b3dd1d44d9eb2d062cf40cb48469e2fe754_s390xRHSA-2025:1227
Fixed in:logging/fluentd-rhel9@sha256:ff369dce86ef0a6dc6fd0f9a84c191f5fc5551d5fa80bf06017cc97c134b8218_s390xRHSA-2025:1227
Fixed in:logging/vector-rhel9@sha256:85a2ee2d4df59d237ebb12c7700ed0b6439c1330aae341c3909f56de73128d66_s390xRHSA-2025:1227
Fixed in:logging/fluentd-rhel9@sha256:d0516cdb390b87797550ccd54b92d8986c1742f405f8b894df7b61a474801a68_ppc64leRHSA-2025:1227
openshift-logging/cluster-loggingRocky
Fixed in:rhel9-operator@sha256:f6fae7a55c5f45d90a9df360cefda01de744b10b50b138d40f75a1cf1f778511_arm64RHSA-2025:1227
Fixed in:rhel9-operator@sha256:5d91887518d966664794f4871653624da04a9c555d21752a4790b70bac47e1de_s390xRHSA-2025:1227
Fixed in:rhel9-operator@sha256:e6386dbf8cf2d2c0d953f3c378baceeb480ee8943d7522d975c2abde7aab0325_ppc64leRHSA-2025:1227
Fixed in:operator-bundle@sha256:05d36790c431c5bcdce4ac9b0e52aa1cb05fd4b544102733d49b74d23571f74c_amd64RHSA-2025:1227
Fixed in:rhel9-operator@sha256:883f362a4397547edf23b158fec1d7c83d33d88d331d3f6041656a6834ca01ae_amd64RHSA-2025:1227
openshift-logging/cluster-loggingRed Hat / RHEL
Fixed in:rhel9-operator@sha256:883f362a4397547edf23b158fec1d7c83d33d88d331d3f6041656a6834ca01ae_amd64RHSA-2025:1227
Fixed in:operator-bundle@sha256:05d36790c431c5bcdce4ac9b0e52aa1cb05fd4b544102733d49b74d23571f74c_amd64RHSA-2025:1227
Fixed in:rhel9-operator@sha256:f6fae7a55c5f45d90a9df360cefda01de744b10b50b138d40f75a1cf1f778511_arm64RHSA-2025:1227
Fixed in:rhel9-operator@sha256:5d91887518d966664794f4871653624da04a9c555d21752a4790b70bac47e1de_s390xRHSA-2025:1227
Fixed in:rhel9-operator@sha256:e6386dbf8cf2d2c0d953f3c378baceeb480ee8943d7522d975c2abde7aab0325_ppc64leRHSA-2025:1227
openshift-logging/log-file-metricRed Hat / RHEL
Fixed in:exporter-rhel9@sha256:ac93b9ee0ef564713e225ad271a44d4b382ea5e6a44138fddef76645df7fc599_amd64RHSA-2025:1227
Fixed in:exporter-rhel9@sha256:c8131af6025d0db9b10d9d8f7622de16520bd39755ef8d856dcbd0652175138b_s390xRHSA-2025:1227
Fixed in:exporter-rhel9@sha256:cf0db800309fc6549eed4ac00b4bb4fad601bfe0f941cf4a4c3092b05d037be1_ppc64leRHSA-2025:1227
Fixed in:exporter-rhel9@sha256:1abab6bfcbc41e0c0e50b56a1796e20ba0a5a68433632bcc82eeb2d37d8c3402_arm64RHSA-2025:1227
openshift-logging/log-file-metricRocky
Fixed in:exporter-rhel9@sha256:ac93b9ee0ef564713e225ad271a44d4b382ea5e6a44138fddef76645df7fc599_amd64RHSA-2025:1227
Fixed in:exporter-rhel9@sha256:1abab6bfcbc41e0c0e50b56a1796e20ba0a5a68433632bcc82eeb2d37d8c3402_arm64RHSA-2025:1227
Fixed in:exporter-rhel9@sha256:cf0db800309fc6549eed4ac00b4bb4fad601bfe0f941cf4a4c3092b05d037be1_ppc64leRHSA-2025:1227
Fixed in:exporter-rhel9@sha256:c8131af6025d0db9b10d9d8f7622de16520bd39755ef8d856dcbd0652175138b_s390xRHSA-2025:1227
openshift-logging/loggingRed Hat / RHEL
Fixed in:loki-rhel9@sha256:78b2993a35bc6c52dba0d9e9516943ebba02432206de321b8a06c4012bc1b349_ppc64leRHSA-2025:1227
Fixed in:loki-rhel9@sha256:6d73fef832b6c9fc131507f2a0dc966bfc40ee9c8005019ba43f417ca89985e3_arm64RHSA-2025:1227
Fixed in:loki-rhel9@sha256:1d4a55c485dd0866a3d7ac66a4e07d4ee4b974b3b0e0086e97b531fd1be22983_s390xRHSA-2025:1227
Fixed in:loki-rhel9@sha256:295698b1487cf0b8c216ebe404e7c8c8c4cfee4e59fee0967c96fc444c0fdc4f_amd64RHSA-2025:1227
openshift-logging/loggingRocky
Fixed in:loki-rhel9@sha256:1d4a55c485dd0866a3d7ac66a4e07d4ee4b974b3b0e0086e97b531fd1be22983_s390xRHSA-2025:1227
Fixed in:loki-rhel9@sha256:6d73fef832b6c9fc131507f2a0dc966bfc40ee9c8005019ba43f417ca89985e3_arm64RHSA-2025:1227
Fixed in:loki-rhel9@sha256:295698b1487cf0b8c216ebe404e7c8c8c4cfee4e59fee0967c96fc444c0fdc4f_amd64RHSA-2025:1227
Fixed in:loki-rhel9@sha256:78b2993a35bc6c52dba0d9e9516943ebba02432206de321b8a06c4012bc1b349_ppc64leRHSA-2025:1227
openshift-logging/logging-viewRocky
Fixed in:plugin-rhel9@sha256:abf424f8915d9766eb87f151bce018cfb1864d45f0d85f4707b09b7072277a03_arm64RHSA-2025:1227
Fixed in:plugin-rhel9@sha256:74be6cdcdfe1da1b5431cd7f66c78db2a7c399445e905ef704ca4171d3ccf846_ppc64leRHSA-2025:1227
Fixed in:plugin-rhel9@sha256:f95c480d56b07083820e799e1de944693a6945a89c360d3d5859392090e4f944_amd64RHSA-2025:1227
Fixed in:plugin-rhel9@sha256:a480418c3a90a85d411d46a2276112089173affbb23c5fb32691c9e53433eda4_s390xRHSA-2025:1227
openshift-logging/logging-viewRed Hat / RHEL
Fixed in:plugin-rhel9@sha256:74be6cdcdfe1da1b5431cd7f66c78db2a7c399445e905ef704ca4171d3ccf846_ppc64leRHSA-2025:1227
Fixed in:plugin-rhel9@sha256:f95c480d56b07083820e799e1de944693a6945a89c360d3d5859392090e4f944_amd64RHSA-2025:1227
Fixed in:plugin-rhel9@sha256:abf424f8915d9766eb87f151bce018cfb1864d45f0d85f4707b09b7072277a03_arm64RHSA-2025:1227
Fixed in:plugin-rhel9@sha256:a480418c3a90a85d411d46a2276112089173affbb23c5fb32691c9e53433eda4_s390xRHSA-2025:1227
openshift-logging/lokiRocky
Fixed in:operator-bundle@sha256:fd4dd6de9fa37ef936cdb1c7d13716c85207f114701fb0ffad00233242fbfb63_amd64RHSA-2025:1227
Fixed in:rhel9-operator@sha256:b35a0df55c1de24bcc6ce7740210abd61b4fc4d1e769a3c36f6014dee55efea9_arm64RHSA-2025:1227
Fixed in:rhel9-operator@sha256:f69b982c4c9cf8af53f2a16ba1af93f8288b667ab6cc5461690231096fe211ff_s390xRHSA-2025:1227
Fixed in:rhel9-operator@sha256:35d52bf4cbed75a78fba98ead066a88993622f5b648b49265455c90dbea6b57a_ppc64leRHSA-2025:1227
Fixed in:rhel9-operator@sha256:6f379a6740699d19a0b9c14ed4f306b4cf8533b6d88e28e4cd2564a02e20f334_amd64RHSA-2025:1227
openshift-logging/lokiRed Hat / RHEL
Fixed in:rhel9-operator@sha256:6f379a6740699d19a0b9c14ed4f306b4cf8533b6d88e28e4cd2564a02e20f334_amd64RHSA-2025:1227
Fixed in:rhel9-operator@sha256:b35a0df55c1de24bcc6ce7740210abd61b4fc4d1e769a3c36f6014dee55efea9_arm64RHSA-2025:1227
Fixed in:rhel9-operator@sha256:35d52bf4cbed75a78fba98ead066a88993622f5b648b49265455c90dbea6b57a_ppc64leRHSA-2025:1227
Fixed in:rhel9-operator@sha256:f69b982c4c9cf8af53f2a16ba1af93f8288b667ab6cc5461690231096fe211ff_s390xRHSA-2025:1227
Fixed in:operator-bundle@sha256:fd4dd6de9fa37ef936cdb1c7d13716c85207f114701fb0ffad00233242fbfb63_amd64RHSA-2025:1227
openshift-logging/lokistackRocky
Fixed in:gateway-rhel9@sha256:590380885bc50a26570c0dad142a0920cce5d6e2f44c76cf5b9758fc28512e9c_ppc64leRHSA-2025:1227
Fixed in:gateway-rhel9@sha256:735c68e2570fb35cd9cecc13b81840ff38d11ed62aa4c7f0d78804845adfbf39_amd64RHSA-2025:1227
Fixed in:gateway-rhel9@sha256:df94b5b1b5220c6b1347c43352a1edb05f480f4d70c97cf0d3667631471f1d9c_arm64RHSA-2025:1227
Fixed in:gateway-rhel9@sha256:902c4b759d2efe260456756511a4243ccd7ad114b2c39d2cf51305296903a290_s390xRHSA-2025:1227
openshift-logging/lokistackRed Hat / RHEL
Fixed in:gateway-rhel9@sha256:902c4b759d2efe260456756511a4243ccd7ad114b2c39d2cf51305296903a290_s390xRHSA-2025:1227
Fixed in:gateway-rhel9@sha256:df94b5b1b5220c6b1347c43352a1edb05f480f4d70c97cf0d3667631471f1d9c_arm64RHSA-2025:1227
Fixed in:gateway-rhel9@sha256:735c68e2570fb35cd9cecc13b81840ff38d11ed62aa4c7f0d78804845adfbf39_amd64RHSA-2025:1227
Fixed in:gateway-rhel9@sha256:590380885bc50a26570c0dad142a0920cce5d6e2f44c76cf5b9758fc28512e9c_ppc64leRHSA-2025:1227
openshift-logging/opaRocky
Fixed in:openshift-rhel9@sha256:9507ecc73d91c9cb8179a8f57375c95941fe71c3fb6e6347b4fdc3ea2c5cfe17_arm64RHSA-2025:1227
Fixed in:openshift-rhel9@sha256:e850537f0ab9420570d42365d7f4ed9fff65110c3910a334dac2aa29b6e3e2b9_amd64RHSA-2025:1227
Fixed in:openshift-rhel9@sha256:50ba9a45a46d5419475536c90a98abbe088c07b914f522e9278e4f2349417e96_ppc64leRHSA-2025:1227
Fixed in:openshift-rhel9@sha256:c86ede957b5807e3194675759716650c4df0ef7d2e8894b942b7a2aab2c0f38f_s390xRHSA-2025:1227
openshift-logging/opaRed Hat / RHEL
Fixed in:openshift-rhel9@sha256:9507ecc73d91c9cb8179a8f57375c95941fe71c3fb6e6347b4fdc3ea2c5cfe17_arm64RHSA-2025:1227
Fixed in:openshift-rhel9@sha256:50ba9a45a46d5419475536c90a98abbe088c07b914f522e9278e4f2349417e96_ppc64leRHSA-2025:1227
Fixed in:openshift-rhel9@sha256:c86ede957b5807e3194675759716650c4df0ef7d2e8894b942b7a2aab2c0f38f_s390xRHSA-2025:1227
Fixed in:openshift-rhel9@sha256:e850537f0ab9420570d42365d7f4ed9fff65110c3910a334dac2aa29b6e3e2b9_amd64RHSA-2025:1227
libruby2.3Ubuntu
Fixed in:2.3.1-2~ubuntu16.04.16+esm11USN-7840-1
libruby2.5Ubuntu
Fixed in:2.5.1-1ubuntu1.16+esm6USN-7840-1
libruby2.7Ubuntu
Fixed in:2.7.0-5ubuntu1.18+esm3USN-7840-1
ruby-webrickUbuntu
Fixed in:1.7.0-3ubuntu0.1USN-7057-2
Fixed in:1.8.1-1ubuntu0.1USN-7057-1
ruby2.3Ubuntu
Fixed in:2.3.1-2~ubuntu16.04.16+esm11USN-7840-1
ruby2.5Ubuntu
Fixed in:2.5.1-1ubuntu1.16+esm6USN-7840-1
ruby2.7Ubuntu
Fixed in:2.7.0-5ubuntu1.18+esm3USN-7840-1
Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.
CVSS v3.1 Vector
No CVSS vector data available.
Exploit Intelligence
0.39%probability of exploitation in 30 days
31stpercentile
Low risk: more likely to be exploited than 31% of all known CVEs.
References
Other references4
Embed a live status badge for CVE-2024-47220
Markdown
[](https://tridentstack.com/cve/CVE-2024-47220)HTML
<a href="https://tridentstack.com/cve/CVE-2024-47220"><img src="https://tridentstack.com/cve/badge/CVE-2024-47220.svg" alt="CVE-2024-47220"></a>Find and fix vulnerabilities across your fleet
TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.
Start freeThis product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2025-01-09.