Lucene search
PRIOn knowledge basePRION:CVE-2016-9964HistoryDec 16, 2016 - 9:59 a.m.
Design/Logic Flaw
2016-12-1609:59:00
PRIOn knowledge base
www.prio-n.com
5
redirect() in bottle.py in bottle 0.12.10 doesn’t filter a “\r\n” sequence, which leads to a CRLF attack, as demonstrated by a redirect(“233\r\nSet-Cookie: name=salt”) call.
| CPE | Name | Operator | Version |
|---|---|---|---|
| bottle | eq | 0.12.10 | |
| debian_linux | eq | 8.0 |
Related
nessus
nessus
Debian DSA-3743-1 : python-bottle - security update
2016-12-21 00:00:00
Fedora 26 : python-bottle (2018-909707fc68)
2018-01-24 00:00:00
Fedora 27 : python-bottle (2018-6cb474b8ff)
2018-01-24 00:00:00
fedora
fedora
[SECURITY] Fedora 26 Update: python-bottle-0.12.13-1.fc26
2018-01-23 21:21:17
[SECURITY] Fedora 27 Update: python-bottle-0.12.13-1.fc27
2018-01-23 21:50:51
intel
intel
Intel® Quartus® Prime Pro
2018-07-10 00:00:00
openvas
openvas
Fedora Update for python-bottle FEDORA-2018-6cb474b8ff
2018-01-24 00:00:00
Mageia: Security Advisory (MGASA-2017-0031)
2022-01-28 00:00:00
Debian Security Advisory DSA 3743-1 (python-bottle - security update)
2016-12-20 00:00:00
ubuntucve
ubuntucve
CVE-2016-9964
2016-12-16 00:00:00
github
github
bottle.py vulnerable to CRLF Injection
2022-05-17 03:05:15
debiancve
debiancve
CVE-2016-9964
2016-12-16 09:59:00
osv
osv
bottle.py vulnerable to CRLF Injection
2022-05-17 03:05:15
PYSEC-2016-24
2016-12-16 09:59:00
debian
debian
[SECURITY] [DSA 3743-1] python-bottle security update
2016-12-20 19:04:38
[SECURITY] [DLA 761-1] python-bottle security update
2016-12-24 18:16:41
[SECURITY] [DSA 3743-1] python-bottle security update
2016-12-20 19:04:38
cve
cve
CVE-2016-9964
2016-12-16 09:59:00
mageia
mageia
Updated python-bottle packages fix security vulnerability
2017-01-30 01:31:20
veracode
veracode
Carriage Return And Line Feed (CRLF)
2016-12-19 03:00:33
cvelist
cvelist
CVE-2016-9964
2016-12-16 09:02:00
nvd
nvd
CVE-2016-9964
2016-12-16 09:59:00