Lucene search

K
redosRedosROS-20221007-01
HistoryOct 07, 2022 - 12:00 a.m.

ROS-20221007-01

2022-10-0700:00:00
redos.red-soft.ru
13

3.7 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

50.1%

The cURL command line utility vulnerability is related to how cookies with control codes (byte values less than 32) are processed.
codes (byte values less than 32). Exploitation of the vulnerability could allow an attacker acting remotely to send a cookie containing such control codes to a remote user.
remotely to send a cookie containing control codes that would cause the server to return a response of
400, effectively allowing a โ€œsister siteโ€ to deny service to related sites

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64curl<=ย 7.81.0-4UNKNOWN

3.7 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

50.1%