Lucene search

CVE-2017-17742

🗓️ 03 Apr 2018 22:00:29Reported by GoogleType

osv🔗 osv.dev👁 18 Views

Ruby versions before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1 are vulnerable to HTTP Response Splitting attack

Reporter	Title	Published	Views	Family All 157
UbuntuCve	CVE-2017-17742	3 Apr 201800:00	–	ubuntucve
Veracode	HTTP Response Splitting	15 Jan 201909:27	–	veracode
Hacker One	Ruby: Response splitting vulnerability in WEBrick	25 Jul 201620:33	–	hackerone
Hacker One	Ruby: HTTP header can split /[\r\n]/ instead of /\r\n/	2 Apr 201814:50	–	hackerone
NVD	CVE-2017-17742	3 Apr 201822:29	–	nvd
NVD	CVE-2019-16254	26 Nov 201918:15	–	nvd
CVE	CVE-2017-17742	3 Apr 201822:29	–	cve
CVE	CVE-2019-16254	26 Nov 201918:15	–	cve
RubySec	HTTP response splitting in WEBrick	27 Mar 201821:00	–	rubygems
RubySec	HTTP response splitting in WEBrick (Additional fix)	30 Sep 201921:00	–	rubygems

Source	Link
securityfocus	www.securityfocus.com/bid/103684
access	www.access.redhat.com/errata/RHSA-2018:3729
access	www.access.redhat.com/errata/RHSA-2018:3730
access	www.access.redhat.com/errata/RHSA-2018:3731
access	www.access.redhat.com/errata/RHSA-2019:2028
debian	www.debian.org/security/2018/dsa-4259
ruby-lang	www.ruby-lang.org/en/news/2018/03/28/http-response-splitting-in-webrick-cve-2017-17742/
ruby-lang	www.ruby-lang.org/en/news/2018/03/28/ruby-2-2-10-released/
ruby-lang	www.ruby-lang.org/en/news/2018/03/28/ruby-2-3-7-released/
ruby-lang	www.ruby-lang.org/en/news/2018/03/28/ruby-2-4-4-released/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

03 Apr 2018 22:29Current

6.8Medium risk

Vulners AI Score6.8

EPSS0.006