Header Splitting Attack

🗓️ 22 Aug 2021 13:42:46Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 21 Views

Firefox vulnerability to header splitting attac

Reporter	Title	Published	Views	Family All 91
ALT Linux	Security fix for the ALT Linux 10 package thunderbird version 91.0.2-alt1	23 Aug 202100:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package firefox-esr version 91.0.1-alt1	4 Sep 202100:00	–	altlinux
AlpineLinux	CVE-2021-29991	3 Nov 202100:04	–	alpinelinux
AstraLinux	Astra Linux - уязвимость в firefox, thunderbird	3 May 202623:59	–	astralinux
Circl	CVE-2021-29991	3 Nov 202106:23	–	circl
CNNVD	Mozilla Firefox和Mozilla Thunderbird 安全漏洞	17 Aug 202100:00	–	cnnvd
CVE	CVE-2021-29991	3 Nov 202100:04	–	cve
Cvelist	CVE-2021-29991	3 Nov 202100:04	–	cvelist
Debian CVE	CVE-2021-29991	3 Nov 202100:04	–	debiancve
EUVD	EUVD-2021-16450	7 Oct 202500:30	–	euvd

Vulners

Node

mozilla firefoxMatch81.0-2debian

AND

mozilla firefoxMatch83.0-1debian

AND

mozilla firefoxMatch82.0.3-1debian

AND

debian debian_linuxMatch999

google bionicMatch83.0+build2-0ubuntu0.18.04.2debian

AND

google bionicMatch80.0.1+build1-0ubuntu0.18.04.1debian

AND

google bionicMatch59.0.2+build1-0ubuntu1debian

AND

google bionicMatch80.0+build2-0ubuntu0.18.04.1debian

AND

debian debian_linux

focal focalMatch80.0+build2-0ubuntu0.20.04.1debian

AND

focal focalMatch75.0+build3-0ubuntu1debian

AND

focal focalMatch83.0+build2-0ubuntu0.20.04.1debian

AND

focal focalMatch80.0.1+build1-0ubuntu0.20.04.1debian

AND

debian debian_linux

hirsute hirsuteMatch83.0+build2-0ubuntu1debian

AND

hirsute hirsuteMatch86.0+build3-0ubuntu1debian

AND

debian debian_linux

mozilla firefoxMatch76.0.1-r1os

AND

mozilla firefoxMatch75.0-r1os

AND

mozilla firefoxMatch74.0-r1os

AND

mozilla firefoxMatch89.0.1-r0os

AND

mozilla firefoxMatch90.0-r0os

AND

mozilla firefoxMatch87.0-r0os

AND

mozilla firefoxMatch85.0.2-r1os

AND

mozilla firefoxMatch90.0.2-r0os

AND

mozilla firefoxMatch88.0.1-r0os

AND

mozilla firefoxMatch89.0-r0os

AND

mozilla firefoxMatch76.0.1-r0os

AND

mozilla firefoxMatch73.0.1-r1os

AND

mozilla firefoxMatch89.0.2-r0os

AND

mozilla firefoxMatch74.0.1-r0os

AND

mozilla firefoxMatch75.0-r2os

AND

mozilla firefoxMatch89.0.1-r1os

AND

mozilla firefoxMatch76.0-r0os

AND

mozilla firefoxMatch88.0-r0os

AND

mozilla firefoxMatch85.0.2-r0os

AND

alpinelinux alpine_linuxMatchedge

devel develMatch86.0+build3-0ubuntu1debian

AND

devel develMatch78.0.1+build1-0ubuntu1debian

AND

devel develMatch81.0+build1-0ubuntu1debian

AND

devel develMatch80.0.1+build1-0ubuntu1debian

AND

devel develMatch83.0+build2-0ubuntu1debian

AND

debian debian_linux

focal focalMatch1:78.5.0+build3-0ubuntu0.20.04.1debian

AND

focal focalMatch1:68.7.0+build1-0ubuntu2debian

AND

focal focalMatch1:78.13.0+build1-0ubuntu0.20.04.2debian

AND

focal focalMatch1:68.10.0+build1-0ubuntu0.20.04.1debian

AND

debian debian_linux

google bionicMatch1:78.13.0+build1-0ubuntu0.18.04.1debian

AND

google bionicMatch1:52.7.0+build1-0ubuntu1debian

AND

google bionicMatch1:68.10.0+build1-0ubuntu0.18.04.1debian

AND

debian debian_linux

mozilla thunderbirdMatch78.9.0-r2os

AND

mozilla thunderbirdMatch68.7.0-r1os

AND

mozilla thunderbirdMatch78.9.0-r0os

AND

mozilla thunderbirdMatch68.8.1-r0os

AND

mozilla thunderbirdMatch68.6.0-r0os

AND

mozilla thunderbirdMatch68.6.0-r2os

AND

mozilla thunderbirdMatch78.9.0-r1os

AND

mozilla thunderbirdMatch78.7.0-r0os

AND

mozilla thunderbirdMatch78.9.0-r3os

AND

mozilla thunderbirdMatch68.7.0-r0os

AND

mozilla thunderbirdMatch68.8.0-r0os

AND

mozilla thunderbirdMatch68.5.0-r1os

AND

alpinelinux alpine_linuxMatchedge

Source	Link
security-tracker	www.security-tracker.debian.org/tracker/CVE-2021-29991
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi
mozilla	www.mozilla.org/security/advisories/mfsa2021-37/

04 Nov 2021 22:26Current

3.7Low risk

Vulners AI Score3.7

CVSS 25.8

CVSS 3.18.1

EPSS0.00307