PT-2023-22303 · Laminas · Laminas Diactoros

🗓️ 19 Apr 2023 00:00:00Reported by Positive TechnologiesType

Laminas Diactoros header parsing allows newline in headers, risking denial of service; update to patched versions.

Reporter	Title	Published	Views	Family All 119
FreeBSD	mantis -- multiple vulnerabilities	14 Oct 202300:00	–	freebsd
FreeBSD	mediawiki -- multiple vulnerabilities	21 Apr 202300:00	–	freebsd
Circl	CVE-2023-29197	27 Oct 202317:00	–	circl
Circl	CVE-2023-29530	25 Apr 202300:19	–	circl
CNNVD	PSR-7 Message Implementation 安全漏洞	17 Apr 202300:00	–	cnnvd
CNNVD	Laminas Project diactoros 输入验证错误漏洞	24 Apr 202300:00	–	cnnvd
CVE	CVE-2023-29197	17 Apr 202321:08	–	cve
CVE	CVE-2023-29530	24 Apr 202319:34	–	cve
Cvelist	CVE-2023-29197 Improper header name validation in guzzlehttp/psr7	17 Apr 202321:08	–	cvelist
Cvelist	CVE-2023-29530 Laminas Diactoros vulnerable to HTTP Multiline Header Termination	24 Apr 202319:34	–	cvelist

Source	Link
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/guzzlehttp/psr7/CVE-2023-29197.yaml
github	www.github.com/laminas/laminas-diactoros/security/advisories/GHSA-xv3h-4844-9h36
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-29197
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/O35UN4IK6VS2LXSRWUDFWY7NI73RKY2U
osv	www.osv.dev/vulnerability/GHSA-wxmh-65f7-jcvw
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/FJANWDXJZE5BGLN4MQ4FEHV5LJ6CMKQF
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/BPW54QK7ISDALPLP2CKODU4ZIVRYS336
osv	www.osv.dev/vulnerability/GHSA-xv3h-4844-9h36
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-29530
osv	www.osv.dev/vulnerability/CVE-2023-29530

05 May 2023 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.17.5

EPSS0.04782

SSVC