Lucene search

CVE-2019-16254

🗓️ 26 Nov 2019 18:15:15Reported by GoogleType

osv🔗 osv.dev👁 18 Views

Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows HTTP Response Splitting

Reporter	Title	Published	Views	Family All 199
RedhatCVE	CVE-2019-16254	9 Jan 202019:38	–	redhatcve
RedhatCVE	CVE-2017-17742	29 Mar 201809:19	–	redhatcve
AlpineLinux	CVE-2019-16254	26 Nov 201918:15	–	alpinelinux
AlpineLinux	CVE-2017-17742	3 Apr 201822:29	–	alpinelinux
Prion	Input validation	26 Nov 201918:15	–	prion
Prion	Design/Logic Flaw	3 Apr 201822:29	–	prion
Prion	Cross site scripting	28 Feb 202017:15	–	prion
Debian CVE	CVE-2019-16254	26 Nov 201918:15	–	debiancve
Debian CVE	CVE-2017-17742	3 Apr 201822:29	–	debiancve
Debian CVE	CVE-2020-5247	28 Feb 202017:15	–	debiancve

Source	Link
security	www.security.gentoo.org/glsa/202003-06
debian	www.debian.org/security/2019/dsa-4586
debian	www.debian.org/security/2019/dsa-4587
ruby-lang	www.ruby-lang.org/ja/news/2019/10/01/http-response-splitting-in-webrick-cve-2019-16254/
ruby-lang	www.ruby-lang.org/ja/news/2019/10/01/ruby-2-4-8-released/
ruby-lang	www.ruby-lang.org/ja/news/2019/10/01/ruby-2-5-7-released/
ruby-lang	www.ruby-lang.org/ja/news/2019/10/01/ruby-2-6-5-released/
lists	www.lists.debian.org/debian-lts-announce/2019/11/msg00025.html
lists	www.lists.opensuse.org/opensuse-security-announce/2020-03/msg00041.html
hackerone	www.hackerone.com/reports/331984

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

26 Nov 2019 18:15Current

6.8Medium risk

Vulners AI Score6.8

EPSS0.008