HTTP Response Splitting

🗓️ 07 Dec 2022 11:55:45Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 43 Views

HTTP response splitting vulnerability in Rub

Reporter	Title	Published	Views	Family All 220
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation 2.6.3 fixes multiple security vulnerabilities	1 Nov 202310:38	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insights 1.6.9 addresses multiple security vulnerabilities.	18 Jul 202313:09	–	ibm
FreeBSD	rubygem-cgi -- HTTP response splitting vulnerability	22 Nov 202200:00	–	freebsd
Tenable Nessus	Amazon Linux 2022 : ruby3.1, ruby3.1-bundled-gems, ruby3.1-default-gems (ALAS2022-2023-262)	25 Jan 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : ruby (ALAS-2024-2503)	18 Mar 202400:00	–	nessus
Tenable Nessus	Amazon Linux 2 : ruby (ALASRUBY2.6-2023-003)	27 Sep 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : ruby (ALASRUBY3.0-2023-004)	27 Sep 202300:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0080: ruby:2.7 (ALINUX3-SA-2023:0080)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : ruby:2.7 (ALSA-2023:3821)	29 Jun 202300:00	–	nessus
Tenable Nessus	AlmaLinux 8 : ruby:3.1 (ALSA-2024:1431)	21 Mar 202400:00	–	nessus

Vulners

Node

AND

ruby rubyMatch3.1.2-r1ruby

alpinelinux alpine_linuxMatch3.17

AND

ruby rubyMatch3.1.2-r0ruby

alpinelinux alpine_linuxMatch3.16

AND

ruby rubyMatch2.7.4-r0ruby

ruby rubyMatch2.6.5-r2ruby

ruby rubyMatch3.1.2-r1ruby

ruby rubyMatch2.7.2-r3ruby

ruby rubyMatch3.1.2-r0ruby

ruby rubyMatch3.1.1-r0ruby

ruby rubyMatch2.7.3-r0ruby

ruby rubyMatch2.6.6-r4ruby

ruby rubyMatch2.7.3-r1ruby

ruby rubyMatch2.7.4-r1ruby

ruby rubyMatch2.7.1-r3ruby

ruby rubyMatch3.0.3-r0ruby

ruby rubyMatch2.7.2-r4ruby

ruby rubyMatch3.0.2-r0ruby

ruby rubyMatch2.6.6-r2ruby

alpinelinux alpine_linuxMatchedge

AND

ruby rubyMatch2.7.6-r0ruby

ruby rubyMatch2.7.5-r0ruby

ruby rubyMatch2.7.4-r0ruby

ruby rubyMatch2.7.3-r1ruby

alpinelinux alpine_linuxMatch3.14

AND

ruby rubyMatch3.0.3-r0ruby

ruby rubyMatch3.0.2-r0ruby

ruby rubyMatch3.0.4-r0ruby

alpinelinux alpine_linuxMatch3.15

AND

google bionicMatch2.5.1-1ubuntu1.7debian

google bionicMatch2.5.1-1ubuntu1debian

google bionicMatch2.5.1-1ubuntu1.10debian

google bionicMatch2.5.1-1ubuntu1.6debian

debian debian_linux

AND

focal focalMatch2.7.0-5ubuntu1.2debian

focal focalMatch2.7.0-5ubuntu1debian

focal focalMatch2.7.0-5ubuntu1.1debian

debian debian_linux

AND

ruby2.5 ruby2.5Match2.5.5-3+deb10u3debian

ruby2.5 ruby2.5Match2.5.5-3+deb10u2debian

debian debian_linuxMatch10

AND

ruby2.7 ruby2.7Match2.7.2-3debian

debian debian_linuxMatch11

cgi cgiRange0.3.0–0.3.3ruby

cgi cgiRange0.1.1–0.2.1ruby

cgi cgiRange0.1.0–0.1.0.1ruby

Source	Link
bugzilla	www.bugzilla.suse.com/show_bug.cgi
github	www.github.com/ruby/cgi/commit/85e22c30b4e410d1dc57f21160cc24b236b8cdc6
github	www.github.com/ruby/cgi/commit/35317005f853112295de8b8bd99643e66dff4e33
github	www.github.com/ruby/cgi/commit/64c5045c0a6b84fdb938a8465a0890e5f7162708
lists	www.lists.debian.org/debian-lts-announce/2023/06/msg00012.html
secdb	www.secdb.alpinelinux.org/v3.17/main.yaml
secdb	www.secdb.alpinelinux.org/edge/main.yaml
secdb	www.secdb.alpinelinux.org/v3.16/main.yaml
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/THVTYHHEOVLQFCFHWURZYO7PVUPBHRZD/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/THVTYHHEOVLQFCFHWURZYO7PVUPBHRZD/

24 Jan 2024 06:21Current

8.2High risk

Vulners AI Score8.2

CVSS 3.18.8

EPSS0.02287