libsoup: HTTP request smuggling via stripping null bytes from the ends of header names

A flaw was found in the Libsoup library. When Libsoup parses HTTP headers, it ignores null bytes at the end of header names. Thus, Transfer-Encoding: chunked is equivalent to Transfer-Encoding\x00: chunked. This issue allows request smuggling when Libsoup is used in a service behind a reverse pro...

DEBIAN-CVE-2024-10006

A vulnerability was identified in Consul and Consul Enterprise “Consul” such that using Headers in L7 traffic intentions could bypass HTTP header based access rules...

Sharp MFP 安全漏洞

Sharp MFP is a series of multifunction printers from Sharp Japan. A security vulnerability exists in Sharp MFP that stems from not properly handling HTTP request headers, resulting in an out-of-bounds read vulnerability, where a crafted HTTP request could cause the affected product to crash...

IBM Datacap Navigator 安全漏洞

IBM Datacap Navigator is a Web client for Datacap from International Business Machines IBM. IBM Datacap Navigator suffers from an HTTP header injection vulnerability that originates from an input validation error in the HOST header, which can be exploited by an attacker to conduct cross-site...

The vulnerability of the microprogramming software of Siemens SICAM’s CPCI85 and CPC80 control modules allows a hacker to execute arbitrary code or cause malfunctions during maintenance operations.

The vulnerability of the CPCI85 and CPC80 processor control module software from Siemens SICAM is related to errors that occur when a string or array is terminated with the NULL character during the analysis of a specific HTTP header. Exploiting this vulnerability can allow an attacker to execute...

The vulnerability of the Squid proxy server, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the Squid proxy server is related to uncontrolled resource consumption due to filtering and reducing data to unsafe values during the processing of HTTP headers. Exploiting this vulnerability can allow a remote attacker to cause service interruptions, provided that the defaul...

CLSA-2024-1711491615 squid: Fix of CVE-2024-25617

CVE-2024-25617: Fix denial of service in HTTP header parser...

CVE-2024-22081

An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. Unauthenticated memory corruption can occur in the HTTP header parsing mechanism...

Elspec G5 digital fault recorder security vulnerability

The Elspec G5 digital fault recorder is a digital fault recorder from Elspec, Israel, used to monitor and record fault events and waveform data in power systems. A security vulnerability exists in Elspec G5 digital fault recorder version 1.1.4.15 and prior versions, which originates from an...

The vulnerability of the sub_4484A8() function in D-Link DIR-823G router microprogramming software allows a hacker to induce a service failure.

The vulnerability of the sub4484A8 function in D-Link DIR-823G router microprogramming software is related to errors in pointer manipulation during the processing of HTTP headers. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the NEXO-OS operating system in the Bosch Nexo cordless nutrunner and Bosch Nexo special cordless nutrunner tools for installation work in production lines allows a malicious individual to inject arbitrary HTTP response headers.

The vulnerability of the NEXO-OS operating system for tools used in production line assembly work, such as the Bosch Nexo cordless nutrunner and the Bosch Nexo special cordless nutrunner, is related to the failure to handle CRLF sequences in HTTP headers. Exploiting this vulnerability allows an...

Poly CCX and Trio Security Vulnerabilities

Poly Trio is a Trio series business conference phone from Poly USA. A security vulnerability exists in Poly CCX and Trio that stems from a denial of service DOS vulnerability in the cookie parameter of the HTTP Header Handler component. Affected products and versions: Poly CCX version 400, CCX...

OESA-2023-1854 python-aiohttp security update

Async http client/server framework asyncio. Security Fixes: aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Affected versions of aiohttp have a security vulnerability regarding the inconsistent interpretation of the http protocol. HTTP/1.1 is a persistent protocol,...

Philips EncoreAnywhere Information Disclosure Vulnerability

Philips EncoreAnywhere is a complete solution for collecting and sharing patient adherence data via the Web from Philips Netherlands. An information disclosure vulnerability exists in Philips EncoreAnywhere versions 2.36.3.3 and earlier, which stems from an HTTP header containing data that an...

The vulnerability of the HTTP-based microprogramming software service of TP-Link Tapo C100 allows a intruder to trigger a service failure.

The vulnerability of the HTTP-based microprogramming software for TP-Link Tapo C100 lies in the lack of measures taken to handle CRLF sequences in HTTP headers. Exploiting this vulnerability allows a remote attacker to cause service failures by sending specially crafted HTTP requests...

UBUNTU-CVE-2023-43669

The Tungstenite crate before 0.20.1 for Rust allows remote attackers to cause a denial of service minutes of CPU consumption via an excessive length of an HTTP header in a client handshake. The length affects both how many times a parse is attempted e.g., thousands of times and the average amount...

Malware in all-in-one-web-header-footer

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

AZL-27410 CVE-2023-29406 affecting package golang for versions less than 1.20.7-1

The HTTP/1 client does not fully validate the contents of the Host header. A maliciously crafted Host header can inject additional headers or entire requests. With fix, the HTTP/1 client now refuses to send requests containing an invalid Request.Host or Request.URL.Host value...

CVE-2023-34472

AMI SPx contains a vulnerability in the BMC where an Attacker may cause an improper neutralization of CRLF sequences in HTTP Headers. A successful exploit of this vulnerability may lead to a loss of integrity...

golang: net/http, net/textproto: denial of service from excessive memory allocation

A flaw was found in Golang Go, where it is vulnerable to a denial of service caused by memory exhaustion in the common function in HTTP and MIME header parsing. By sending a specially crafted request, a remote attacker can cause a denial of service...