Описание
In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol parsing error causes the http_header signature to not alert on a response with a single \r\n ending.
Ссылки
- Patch
- PatchThird Party Advisory
- Issue TrackingVendor Advisory
- Patch
- PatchThird Party Advisory
- Issue TrackingVendor Advisory
Уязвимые конфигурации
Одно из
EPSS
5.3 Medium
CVSS3
5 Medium
CVSS2
Дефекты
Связанные уязвимости
In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol parsing error causes the http_header signature to not alert on a response with a single \r\n ending.
In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other prod ...
In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol parsing error causes the http_header signature to not alert on a response with a single \r\n ending.
ALT-PU-2020-3131: package `libhtp` update to version 0.5.35-alt1
EPSS
5.3 Medium
CVSS3
5 Medium
CVSS2