Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 10 | libhttp-daemon-perl | 6.01-3+deb10u1 |
Vulnerabilities 1
-
High 7.3
Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in HTTP::Daemon
HTTP::Daemon is a simple http server class written in perl. Versions prior to 6.15 are subject to a vulnerability which could potentially be exploited to gain privileged access to APIs or poison intermediate caches. It is uncertain how large the risks are, mo…