CRLF Injection

2019-03-1501:13:53

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

JSON

net/http and net/url in github.com/golang/go are vulnerable to CRLF injection. It does not prevent a HTTP header manipulation with the ‘\r\n’ sequence in it, allowing a remote attacker to inject arbitrary response headers or body content via the HTTP header.

CPENameOperatorVersion
github.com/golang/goeqHEAD
github.com/golang/gole1.12beta2
go-toolset-1.11eq1.11.5__1.el7
go-toolset-1.11-golangeq1.11.5__1.el7
golang-1.11:bustereq1.11.6-1+deb10u3
golang-1.7:stretcheq1.7.4-2+deb9u1
golang-1.8:stretcheq1.8.1-1+deb9u1

Name	Operator	Version
github.com/golang/go	eq	HEAD
github.com/golang/go	le	1.12beta2
go-toolset-1.11	eq	1.11.5__1.el7
go-toolset-1.11-golang	eq	1.11.5__1.el7
golang-1.11:buster	eq	1.11.6-1+deb10u3
golang-1.7:stretch	eq	1.7.4-2+deb9u1
golang-1.8:stretch	eq	1.8.1-1+deb9u1