Moderate severityNVD Advisory· Published Jun 25, 2025· Updated Jun 25, 2025
Ruby WEBrick read_header HTTP Request Smuggling Vulnerability
CVE-2025-6442
Description
Ruby WEBrick read_header HTTP Request Smuggling Vulnerability. This vulnerability allows remote attackers to smuggle arbitrary HTTP requests on affected installations of Ruby WEBrick. This issue is exploitable when the product is deployed behind an HTTP proxy that fulfills specific conditions.
The specific flaw exists within the read_headers method. The issue results from the inconsistent parsing of terminators of HTTP headers. An attacker can leverage this vulnerability to smuggle arbitrary HTTP requests. Was ZDI-CAN-21876.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
webrickRubyGems | < 1.8.2 | 1.8.2 |
Affected products
19- ghsa-coords18 versionspkg:gem/webrickpkg:rpm/opensuse/ruby2.5&distro=openSUSE%20Leap%2015.6pkg:rpm/suse/ruby2.5&distro=SUSE%20Enterprise%20Storage%207.1pkg:rpm/suse/ruby2.5&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSSpkg:rpm/suse/ruby2.5&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOSpkg:rpm/suse/ruby2.5&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSSpkg:rpm/suse/ruby2.5&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOSpkg:rpm/suse/ruby2.5&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSSpkg:rpm/suse/ruby2.5&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP6pkg:rpm/suse/ruby2.5&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP7pkg:rpm/suse/ruby2.5&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSSpkg:rpm/suse/ruby2.5&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSSpkg:rpm/suse/ruby2.5&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSSpkg:rpm/suse/ruby2.5&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3pkg:rpm/suse/ruby2.5&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4pkg:rpm/suse/ruby2.5&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5pkg:rpm/suse/ruby2.5&distro=SUSE%20Manager%20Proxy%204.3pkg:rpm/suse/ruby2.5&distro=SUSE%20Manager%20Server%204.3
< 1.8.2+ 17 more
- (no CPE)range: < 1.8.2
- (no CPE)range: < 2.5.9-150000.4.46.1
- (no CPE)range: < 2.5.9-150000.4.46.1
- (no CPE)range: < 2.5.9-150000.4.46.1
- (no CPE)range: < 2.5.9-150000.4.46.1
- (no CPE)range: < 2.5.9-150000.4.46.1
- (no CPE)range: < 2.5.9-150000.4.46.1
- (no CPE)range: < 2.5.9-150000.4.46.1
- (no CPE)range: < 2.5.9-150000.4.46.1
- (no CPE)range: < 2.5.9-150700.24.3.1
- (no CPE)range: < 2.5.9-150000.4.46.1
- (no CPE)range: < 2.5.9-150000.4.46.1
- (no CPE)range: < 2.5.9-150000.4.46.1
- (no CPE)range: < 2.5.9-150000.4.46.1
- (no CPE)range: < 2.5.9-150000.4.46.1
- (no CPE)range: < 2.5.9-150000.4.46.1
- (no CPE)range: < 2.5.9-150000.4.46.1
- (no CPE)range: < 2.5.9-150000.4.46.1
Patches
Vulnerability mechanics
References
6- github.com/advisories/GHSA-r995-q44h-hr64ghsaADVISORY
- github.com/ruby/webrick/commit/ee60354bcb84ec33b9245e1d1aa6e1f7e8132101ghsavendor-advisoryWEB
- nvd.nist.gov/vuln/detail/CVE-2025-6442ghsaADVISORY
- www.zerodayinitiative.com/advisories/ZDI-25-414/mitrex_research-advisory
- github.com/rubysec/ruby-advisory-db/blob/master/gems/webrick/CVE-2025-6442.ymlghsaWEB
- www.zerodayinitiative.com/advisories/ZDI-25-414ghsaWEB
News mentions
0No linked articles in our index yet.