CVE-2017-7443

CVE-2017-7443 affects apt-cacher (before 1.7.15) and apt-cacher-ng (before 3.4). The issue is HTTP response splitting through encoded newline characters due to missing blocking for the %0[ad] regex. Impact is HTTP header injection risk as described in multiple sources (NVD entry). Remediation: up...

CVE-2017-7443

apt-cacher before 1.7.15 and apt-cacher-ng before 3.4 allow HTTP response splitting via encoded newline characters, related to lack of blocking for the %0ad regular expression...

PT-2017-17740

Name of the Vulnerable Software and Affected Versions apt-cacher versions prior to 1.7.15 apt-cacher-ng versions prior to 3.4 Description The issue is related to HTTP response splitting via encoded newline characters. This is due to the lack of blocking for the %0ad regular expression, which can ...

CVE-2017-7443: Improper Neutralization of CRLF Sequences in HTTP Headers

apt-cacher before 1.7.15 and apt-cacher-ng before 3.4 allow HTTP response splitting via encoded newline characters, related to lack of blocking for the %0ad regular expression...

Cross-site Scripting (XSS)

ng-tags-input is vulnerable to cross-site scripting XSS attacks. These attacks are possible through the safeHighlight function...

Design/Logic Flaw

The readetchostsr function in libc/inet/resolv.c in uClibc-ng before 1.0.12 allows remote DNS servers to cause a denial of service infinite loop via a crafted packet...

DEBIAN-CVE-2016-2224

The decodedotted function in libc/inet/resolv.c in uClibc-ng before 1.0.12 allows remote DNS servers to cause a denial of service infinite loop via vectors involving compressed items in a reply...

CVE-2016-2224

The decodedotted function in libc/inet/resolv.c in uClibc-ng before 1.0.12 allows remote DNS servers to cause a denial of service infinite loop via vectors involving compressed items in a reply...

Design/Logic Flaw

The decodedotted function in libc/inet/resolv.c in uClibc-ng before 1.0.12 allows remote DNS servers to cause a denial of service infinite loop via vectors involving compressed items in a reply...

CVE-2016-2225

The readetchostsr function in libc/inet/resolv.c in uClibc-ng before 1.0.12 allows remote DNS servers to cause a denial of service infinite loop via a crafted packet...

CVE-2016-2224

The decodedotted function in libc/inet/resolv.c in uClibc-ng before 1.0.12 allows remote DNS servers to cause a denial of service infinite loop via vectors involving compressed items in a reply...

CVE-2016-2224

The decodedotted function in libc/inet/resolv.c in uClibc-ng before 1.0.12 allows remote DNS servers to cause a denial of service infinite loop via vectors involving compressed items in a reply...

CVE-2016-2224

The decodedotted function in libc/inet/resolv.c in uClibc-ng before 1.0.12 allows remote DNS servers to cause a denial of service infinite loop via vectors involving compressed items in a reply...

CVE-2016-2225

The readetchostsr function in libc/inet/resolv.c in uClibc-ng before 1.0.12 allows remote DNS servers to cause a denial of service infinite loop via a crafted packet...

CVE-2016-2225

CVE-2016-2225 affects uClibc-ng (libc/inet/resolv.c) prior to 1.0.12, where the __read_etc_hosts_r function can be triggered by a crafted DNS packet from a remote server, causing a denial of service (infinite loop). Public data identifies this as a network-affecting vulnerability with CVSS v3.0 b...

CVE-2016-2225

The readetchostsr function in libc/inet/resolv.c in uClibc-ng before 1.0.12 allows remote DNS servers to cause a denial of service infinite loop via a crafted packet...

CVE-2016-2224

CVE-2016-2224 affects the C library uClibc-ng: the __decode_dotted function in libc/inet/resolv.c is vulnerable in builds before 1.0.12, allowing remote DNS servers to trigger a denial of service (infinite loop) by sending specially crafted DNS replies with compressed items. Impact is a network-e...

CVE-2016-2224

The decodedotted function in libc/inet/resolv.c in uClibc-ng before 1.0.12 allows remote DNS servers to cause a denial of service infinite loop via vectors involving compressed items in a reply...

CVE-2016-2225

The readetchostsr function in libc/inet/resolv.c in uClibc-ng before 1.0.12 allows remote DNS servers to cause a denial of service infinite loop via a crafted packet...

PT-2017-8015

Name of the Vulnerable Software and Affected Versions uClibc-ng versions prior to 1.0.12 Description The issue allows remote DNS servers to cause a denial of service, resulting in an infinite loop, via a crafted packet. This is due to a problem in the read etc hosts r function in...