Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2020:0720
HistoryMar 05, 2020 - 10:19 a.m.

(RHSA-2020:0720) Low: python-waitress security update

2020-03-0510:19:12
access.redhat.com
15

8.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

0.021 Low

EPSS

Percentile

89.0%

JSON

Waitress is a pure Python WSGI server which supports HTTP/1.0 and HTTP/1.1.

Security Fix(es):

  • HTTP request smuggling through LF vs CRLF handling (CVE-2019-16785)

  • HTTP request smuggling through invalid Transfer-Encoding (CVE-2019-16786)

  • HTTP Request Smuggling through Invalid whitespace characters in headers
    (CVE-2019-16789)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat8noarchpython3-waitress< 1.4.2-1.el8ostpython3-waitress-1.4.2-1.el8ost.noarch.rpm

Related

nessus 8
mageia 1
openvas 8
fedora 2
suse 2
veracode 3
osv 11
debian 1
prion 3
github 3
debiancve 3
redhatcve 3
ubuntucve 3
cve 3
alpinelinux 3
redhat 1
oracle 1
nessus
nessus
EulerOS 2.0 SP8 : python-waitress (EulerOS-SA-2020-1879)
2020-08-28 00:00:00
EulerOS Virtualization for ARM 64 3.0.6.0 : python-waitress (EulerOS-SA-2020-2049)
2020-09-29 00:00:00
RHEL 8 : python-waitress (RHSA-2020:0720)
2023-01-23 00:00:00
mageia
mageia
Updated python-waitress packages fix security vulnerabilities
2020-02-13 13:49:00
openvas
openvas
Fedora: Security Advisory for python-waitress (FEDORA-2020-bdcc8ffc24)
2020-02-28 00:00:00
Huawei EulerOS: Security Advisory for python-waitress (EulerOS-SA-2020-2049)
2020-09-29 00:00:00
Fedora: Security Advisory for python-waitress (FEDORA-2020-65a7744e38)
2020-02-28 00:00:00
fedora
fedora
[SECURITY] Fedora 30 Update: python-waitress-1.4.3-1.fc30
2020-02-25 14:39:38
[SECURITY] Fedora 31 Update: python-waitress-1.4.3-1.fc31
2020-02-26 17:59:33
suse
suse
Security update for python-waitress (moderate)
2020-11-15 00:00:00
Security update for python-waitress (moderate)
2020-11-14 00:00:00
veracode
veracode
HTTP Request Smuggling
2019-12-27 02:11:39
HTTP Request Smuggling
2019-12-23 07:27:40
CRLF Injection
2019-12-23 03:01:06
osv
osv
waitress - security update
2022-05-12 00:00:00
HTTP Request Smuggling: Invalid Transfer-Encoding in Waitress
2019-12-20 23:04:18
waitress - security update
2020-01-01 00:00:00
debian
debian
[SECURITY] [DLA 3000-1] waitress security update
2022-05-12 21:44:22
prion
prion
Design/Logic Flaw
2019-12-20 23:15:00
Information disclosure
2019-12-26 17:15:00
Design/Logic Flaw
2019-12-20 23:15:00
github
github
HTTP Request Smuggling in Waitress: Invalid whitespace characters in headers (Follow-up)
2020-01-06 18:44:21
HTTP Request Smuggling: LF vs CRLF handling in Waitress
2019-12-20 23:03:57
HTTP Request Smuggling: Invalid Transfer-Encoding in Waitress
2019-12-20 23:04:18
debiancve
debiancve
CVE-2019-16789
2019-12-26 17:15:00
CVE-2019-16786
2019-12-20 23:15:00
CVE-2019-16785
2019-12-20 23:15:00
redhatcve
redhatcve
CVE-2019-16789
2020-01-10 14:08:59
CVE-2019-16785
2020-01-15 20:09:27
CVE-2019-16786
2020-01-15 19:39:03
ubuntucve
ubuntucve
CVE-2019-16785
2019-12-20 00:00:00
CVE-2019-16789
2019-12-26 00:00:00
CVE-2019-16786
2019-12-20 00:00:00
cve
cve
CVE-2019-16786
2019-12-20 23:15:00
CVE-2019-16789
2019-12-26 17:15:00
CVE-2019-16785
2019-12-20 23:15:00
alpinelinux
alpinelinux
CVE-2019-16786
2019-12-20 23:15:00
CVE-2019-16789
2019-12-26 17:15:00
CVE-2019-16785
2019-12-20 23:15:00
redhat
redhat
(RHSA-2021:0420) Moderate: Red Hat Quay v3.4.0 security update
2021-02-04 16:10:17
oracle
oracle
Oracle Critical Patch Update Advisory - April 2022
2022-04-19 00:00:00

8.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

0.021 Low

EPSS

Percentile

89.0%

JSON
Related for RHSA-2020:0720
nessus8mageia1openvas8fedora2suse2veracode3osv11debian1prion3github3debiancve3redhatcve3ubuntucve3cve3alpinelinux3redhat1oracle1