Описание
In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol parsing error causes the http_header signature to not alert on a response with a single \r\n ending.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needs-triage |
| devel | DNE | |
| disco | ignored | end of life |
| eoan | ignored | end of life |
| esm-apps-legacy/xenial | needs-triage | |
| esm-apps/bionic | needs-triage | |
| esm-apps/focal | not-affected | 1:0.5.31-1 |
| esm-apps/jammy | not-affected | 1:0.5.31-1 |
| esm-apps/noble | not-affected | 1:0.5.31-1 |
| esm-apps/resolute | not-affected | 1:0.5.31-1 |
Показывать по
EPSS
5 Medium
CVSS2
5.3 Medium
CVSS3
Связанные уязвимости
In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol parsing error causes the http_header signature to not alert on a response with a single \r\n ending.
In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other prod ...
In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol parsing error causes the http_header signature to not alert on a response with a single \r\n ending.
ALT-PU-2020-3131: package `libhtp` update to version 0.5.35-alt1
EPSS
5 Medium
CVSS2
5.3 Medium
CVSS3