Skip to content
OpenAdvisories
High DLA-3127-1 1 CVE

libhttp-daemon-perl - security update

Published Sep 30, 2022 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 10 libhttp-daemon-perl 6.01-3+deb10u1

Vulnerabilities 1

  • High 7.3

    Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in HTTP::Daemon

    HTTP::Daemon is a simple http server class written in perl. Versions prior to 6.15 are subject to a vulnerability which could potentially be exploited to gain privileged access to APIs or poison intermediate caches. It is uncertain how large the risks are, mo…