143 matches found
CVE-2019-17420
In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol parsing error causes the httpheader signature to not alert on a response with a single \r\n ending...
CVE-2019-17420
CVE-2019-17420 affects LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products. The vulnerability arises from an HTTP protocol parsing error that causes the http_header signature to fail to alert on a response ending with a single CRLF ("\r\n"). Impact is that such responses may bypass...
CVE-2019-17420
In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol parsing error causes the httpheader signature to not alert on a response with a single \r\n ending...
CVE-2019-17420
In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol parsing error causes the httpheader signature to not alert on a response with a single \r\n ending...
CVE-2019-17420: Incomplete Cleanup
In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol parsing error causes the httpheader signature to not alert on a response with a single \r\n ending...
PT-2019-15145
Name of the Vulnerable Software and Affected Versions OISF LibHTP versions prior to 0.5.31 Suricata version 4.1.4 Description An HTTP protocol parsing error occurs in the affected software, causing the http header signature to not alert on a response with a single r ending. Recommendations For OI...
libhtp:fuzz_htp: Use-of-uninitialized-value in crc32
Detailed Report: https://oss-fuzz.com/testcase?key=5629763112140800 Project: libhtp Fuzzing Engine: libFuzzer Fuzz Target: fuzzhtp Job Type: libfuzzermsanlibhtp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: crc32 htpgzipdecompressordecompress...
libhtp:fuzz_htp: Heap-buffer-overflow in LzmaDec_DecodeToDic
Detailed Report: https://oss-fuzz.com/testcase?key=5659352148475904 Project: libhtp Fuzzing Engine: afl Fuzz Target: fuzzhtp Job Type: aflasanlibhtp Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x621000003a6d Crash State: LzmaDecDecodeToDic LzmaDecDecodeToBuf...
libhtp:fuzz_htp: Use-of-uninitialized-value in LzmaDec_TryDummy
Detailed Report: https://oss-fuzz.com/testcase?key=5164808743157760 Project: libhtp Fuzzing Engine: libFuzzer Fuzz Target: fuzzhtp Job Type: libfuzzermsanlibhtp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: LzmaDecTryDummy LzmaDecDecodeToDic...
CVE-2018-10243
htpparseauthorizationdigest in htpparsers.c in LibHTP 0.5.26 allows remote attackers to cause a heap-based buffer over-read via an authorization digest header...
CVE-2018-10243
htpparseauthorizationdigest in htpparsers.c in LibHTP 0.5.26 allows remote attackers to cause a heap-based buffer over-read via an authorization digest header...
DEBIAN-CVE-2018-10243
htpparseauthorizationdigest in htpparsers.c in LibHTP 0.5.26 allows remote attackers to cause a heap-based buffer over-read via an authorization digest header...
CVE-2018-10243
htpparseauthorizationdigest in htpparsers.c in LibHTP 0.5.26 allows remote attackers to cause a heap-based buffer over-read via an authorization digest header...
CVE-2018-10243
CVE-2018-10243 affects LibHTP 0.5.26: the function htp_parse_authorization_digest in htp_parsers.c can cause a heap-based buffer over-read when processing an authorization digest header. This is a remote, network-exploitable condition reported across multiple sources (OSV, Debian/NASL references)...
CVE-2018-10243
htpparseauthorizationdigest in htpparsers.c in LibHTP 0.5.26 allows remote attackers to cause a heap-based buffer over-read via an authorization digest header...
CVE-2018-10243
htpparseauthorizationdigest in htpparsers.c in LibHTP 0.5.26 allows remote attackers to cause a heap-based buffer over-read via an authorization digest header...
CVE-2018-10243
htpparseauthorizationdigest in htpparsers.c in LibHTP 0.5.26 allows remote attackers to cause a heap-based buffer over-read via an authorization digest header...
PT-2019-8749
Name of the Vulnerable Software and Affected Versions LibHTP version 0.5.26 Description The issue allows remote attackers to cause a heap-based buffer over-read via an authorization digest header. This is related to the htp parse authorization digest function in htp parsers.c. Recommendations For...
CVE-2018-10243: Out-of-bounds Read
htpparseauthorizationdigest in htpparsers.c in LibHTP 0.5.26 allows remote attackers to cause a heap-based buffer over-read via an authorization digest header...