Lucene search
+L

10 matches found

osv_debian
osv_debian
•added 2026/08/14 3:17 p.m.•20 views

DEBIAN-CVE-2026-19879

A flaw was found in Undertow, an HTTP server, within its HTTP response header writing path. The writeString method performs a silent narrowing cast from 16-bit Unicode characters to 8-bit bytes when writing HTTP response header values. A remote attacker can exploit this by supplying specific...

5.3CVSS5.9AI score0.00393EPSS
SaveExploits0References1
NVD
NVD
•added 2026/08/14 3:17 p.m.•20 views

CVE-2026-19879

A flaw was found in Undertow, an HTTP server, within its HTTP response header writing path. The writeString method performs a silent narrowing cast from 16-bit Unicode characters to 8-bit bytes when writing HTTP response header values. A remote attacker can exploit this by supplying specific...

5.3CVSS0.00393EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2026/08/14 3:17 p.m.•19 views

UBUNTU-CVE-2026-19879

A flaw was found in Undertow, an HTTP server, within its HTTP response header writing path. The writeString method performs a silent narrowing cast from 16-bit Unicode characters to 8-bit bytes when writing HTTP response header values. A remote attacker can exploit this by supplying specific...

5.3CVSS5.9AI score0.00393EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/08/14 2:51 p.m.•15 views

CVE-2026-19879 Io.undertow/undertow: undertow: http response header integrity issue due to character truncation

A flaw was found in Undertow, an HTTP server, within its HTTP response header writing path. The writeString method performs a silent narrowing cast from 16-bit Unicode characters to 8-bit bytes when writing HTTP response header values. A remote attacker can exploit this by supplying specific...

5.3CVSS5.9AI score0.00393EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/08/14 2:51 p.m.•23 views

CVE-2026-19879

A flaw was found in Undertow, an HTTP server, within its HTTP response header writing path. The writeString method performs a silent narrowing cast from 16-bit Unicode characters to 8-bit bytes when writing HTTP response header values. A remote attacker can exploit this by supplying specific...

5.3CVSS5.9AI score0.00393EPSS
SaveExploits0
CVE
CVE
•added 2026/08/14 2:51 p.m.•97 views

CVE-2026-19879

Undertow contains a vulnerability in the HTTP response header writing path: the writeString() method narrows 16‑bit Unicode to 8‑bit bytes when writing header values, which can truncate characters to ASCII control/symbols and cause limited integrity impact or information disclosure if input isn’t...

5.3CVSS5.9AI score0.00393EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/08/14 2:51 p.m.•34 views

CVE-2026-19879

A flaw was found in Undertow, an HTTP server, within its HTTP response header writing path. The writeString method performs a silent narrowing cast from 16-bit Unicode characters to 8-bit bytes when writing HTTP response header values. A remote attacker can exploit this by supplying specific...

5.3CVSS5.9AI score0.00393EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/08/14 2:51 p.m.•18 views

CVE-2026-19879

A flaw was found in Undertow, an HTTP server, within its HTTP response header writing path. The writeString method performs a silent narrowing cast from 16-bit Unicode characters to 8-bit bytes when writing HTTP response header values. A remote attacker can exploit this by supplying specific...

5.3CVSS5.8AI score0.00393EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/14 12:00 a.m.•7 views

CVE-2026-19879: Incorrect Conversion between Numeric Types

A flaw was found in Undertow, an HTTP server, within its HTTP response header writing path. The writeString method performs a silent narrowing cast from 16-bit Unicode characters to 8-bit bytes when writing HTTP response header values. A remote attacker can exploit this by supplying specific...

5.3CVSS5.9AI score0.00393EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/14 12:00 a.m.•26 views

PT-2026-72036

A flaw was found in Undertow, an HTTP server, within its HTTP response header writing path. The writeString method performs a silent narrowing cast from 16-bit Unicode characters to 8-bit bytes when writing HTTP response header values. A remote attacker can exploit this by supplying specific...

5.3CVSS5.9AI score0.00393EPSS
SaveExploits0References3
Rows per page
Query Builder