Lucene search
K

waitress: HTTP request smuggling through invalid Transfer-Encoding

🗓️ 05 Mar 2020 12:02:14Reported by RedHatType 
redhat
 redhat
🔗 access.redhat.com👁 4 Views

Waitress misinterprets Transfer-Encoding, ignoring lists, using Content-Length, enabling request smuggling or pipelining.

Related
Packages
Refs
ReporterTitlePublishedViews
Family
AlpineLinux
CVE-2019-16786
20 Dec 201923:00
alpinelinux
AstraLinux
Astra Linux - уязвимость в waitress
3 May 202623:59
astralinux
Circl
CVE-2019-16786
16 Mar 202410:16
circl
CNVD
Waitress Environmental Vulnerability (CNVD-2020-01313)
23 Dec 201900:00
cnvd
CVE
CVE-2019-16786
20 Dec 201923:00
cve
Cvelist
CVE-2019-16786 HTTP Request Smuggling: Invalid Transfer-Encoding in Waitress
20 Dec 201923:00
cvelist
Debian
[SECURITY] [DLA 3000-1] waitress security update
12 May 202221:44
debian
Debian CVE
CVE-2019-16786
20 Dec 201923:00
debiancve
Tenable Nessus
Debian DLA-3000-1 : waitress - LTS security update
13 May 202200:00
nessus
Tenable Nessus
EulerOS 2.0 SP8 : python-waitress (EulerOS-SA-2020-1879)
28 Aug 202000:00
nessus
Rows per page
OSOS VersionArchitecturePackagePackage VersionFilename
Red Hat Enterprise Linux8anypython3-waitress0:1.4.2-1.el8ostpython3-waitress-0:1.4.2-1.el8ost.noarch.rpm

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

20 Feb 2026 20:11Current
7.1High risk
Vulners AI Score7.1
CVSS 25
CVSS 3.17.1 - 7.5
EPSS0.00795
4