Lucene search

CVE-2019-16254

🗓️ 20 Nov 2019 00:00:00Reported by ubuntu.comType

Ruby versions 2.4.7 to 2.6.4 allows HTTP Response Splittin

Reporter	Title	Published	Views	Family All 199
Debian CVE	CVE-2019-16254	26 Nov 201918:15	–	debiancve
Debian CVE	CVE-2017-17742	3 Apr 201822:29	–	debiancve
Debian CVE	CVE-2020-5247	28 Feb 202017:15	–	debiancve
NVD	CVE-2019-16254	26 Nov 201918:15	–	nvd
NVD	CVE-2017-17742	3 Apr 201822:29	–	nvd
NVD	CVE-2020-5247	28 Feb 202017:15	–	nvd
OpenVAS	Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2020-1130)	24 Feb 202000:00	–	openvas
OpenVAS	Debian: Security Advisory (DLA-2027-1)	11 Dec 201900:00	–	openvas
OpenVAS	Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2020-1031)	23 Jan 202000:00	–	openvas
OpenVAS	Debian: Security Advisory (DLA-2007-1)	26 Nov 201900:00	–	openvas

Source	Link
ruby-lang	www.ruby-lang.org/en/news/2019/10/01/http-response-splitting-in-webrick-cve-2019-16254/
ubuntu	www.ubuntu.com/security/notices/USN-4201-1
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-16254
launchpad	www.launchpad.net/bugs/cve/CVE-2019-16254
security-tracker	www.security-tracker.debian.org/tracker/CVE-2019-16254

OS	OS Version	Architecture	Package	Package Version	Filename
ubuntu	14.04	noarch	jruby	1.5.6-9+deb8u2build0.14.04.1~esm2	UNKNOWN
ubuntu	16.04	noarch	ruby2.3	2.3.1-2~ubuntu16.04.14	UNKNOWN
ubuntu	18.04	noarch	ruby2.5	2.5.1-1ubuntu1.6	UNKNOWN
ubuntu	19.04	noarch	ruby2.5	2.5.5-1ubuntu1.1	UNKNOWN
ubuntu	19.10	noarch	ruby2.5	2.5.5-4ubuntu2.1	UNKNOWN

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

20 Nov 2019 00:00Current

0.6Low risk

Vulners AI Score0.6

CVSS25.0

CVSS35.3

EPSS0.012