Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2023-52354HistoryJan 22, 2024 - 6:15 a.m.
CVE-2023-52354
2024-01-2206:15:07
Debian Security Bug Tracker
security-tracker.debian.org
4
chasquid
smtp smuggling
lf-terminated lines
unix
cve-2023-52354
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
6.7 Medium
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
18.0%
chasquid before 1.13 allows SMTP smuggling because LF-terminated lines are accepted.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | chasquid | <= 1.11-2 | chasquid_1.11-2_all.deb |
| Debian | 11 | all | chasquid | <= 1.6-1 | chasquid_1.6-1_all.deb |
| Debian | 999 | all | chasquid | < 1.13-1 | chasquid_1.13-1_all.deb |
| Debian | 13 | all | chasquid | < 1.13-1 | chasquid_1.13-1_all.deb |
Related
cve
cve
CVE-2023-52354
2024-01-22 06:15:07
gitlab
gitlab
github
github
chasquid HTTP Request/Response Smuggling vulnerability
2024-01-22 06:30:32
ubuntucve
ubuntucve
CVE-2023-52354
2024-01-22 00:00:00
nvd
nvd
CVE-2023-52354
2024-01-22 06:15:07
veracode
veracode
HTTP Request Smuggling
2024-01-29 19:59:33
osv
osv
prion
prion
Design/Logic Flaw
2024-01-22 06:15:00
cvelist
cvelist
CVE-2023-52354
2024-01-22 00:00:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
6.7 Medium
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
18.0%
Related for DEBIANCVE:CVE-2023-52354