Lucene search

Python -- HTTP Header Injection in Python urllib

🗓️ 24 Nov 2014 00:00:00Reported by FreeBSDType

HTTP Header Injection in Python urlli

Reporter	Title	Published	Views	Family All 118
F5 Networks	K10420455 : Python urllib and urllib2 library vulnerability CVE-2016-5699	7 Dec 201600:00	–	f5
Hacker One	Internet Bug Bounty: Additional information for CVE-2016-5699	2 Sep 201600:15	–	hackerone
Hacker One	Internet Bug Bounty: urllib HTTP header injection CVE-2016-5699	1 Sep 201620:42	–	hackerone
Veracode	CRLF Injection	2 May 201905:46	–	veracode
OpenVAS	Python < 2.7.10, 3.x < 3.3.7, 3.4.x < 3.4.4 HTTP Header Injection Vulnerability (bpo-22928) - Mac OS X	21 Sep 202100:00	–	openvas
OpenVAS	CPython CRLF Injection Vulnerability - Windows	12 Sep 201600:00	–	openvas
OpenVAS	Python < 2.7.10, 3.x < 3.3.7, 3.4.x < 3.4.4 HTTP Header Injection Vulnerability (bpo-22928) - Linux	21 Sep 202100:00	–	openvas
OpenVAS	Python < 2.7.10, 3.x < 3.3.7, 3.4.x < 3.4.4 HTTP Header Injection Vulnerability (bpo-22928) - Windows	21 Sep 202100:00	–	openvas
OpenVAS	CPython CRLF Injection Vulnerability - Linux	12 Sep 201600:00	–	openvas
OpenVAS	Fedora Update for python3 FEDORA-2016-ef784cf9f7	10 Jul 201600:00	–	openvas

Source	Link
openwall	www.openwall.com/lists/oss-security/2016/06/14/7
bugs	www.bugs.python.org/issue22928
blog	www.blog.blindspotsecurity.com/2016/06/advisory-http-header-injection-in.html

OS	OS Version	Architecture	Package	Package Version	Filename
FreeBSD	any	noarch	python27	2.7.10	UNKNOWN
FreeBSD	any	noarch	python33	0	UNKNOWN
FreeBSD	any	noarch	python34	3.4.4	UNKNOWN
FreeBSD	any	noarch	python35	3.5.0	UNKNOWN

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

24 Nov 2014 00:00Current

1Low risk

Vulners AI Score1

CVSS36.1

EPSS0.005