Summary
It was discovered that Pound incorrectly handled certain HTTP requests
A remote attacker could use it to retrieve some sensitive
information. (CVE-2016-10711, CVE-2018-21245)
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | pound | 2.6-6.1ubuntu0.1 |
Vulnerabilities 2
-
Unscored —
Apsis Pound before 2.8a allows request smuggling via crafted headers, a different vulnerability than CVE-2005-3751.
-
Unscored —
Pound before 2.8 allows HTTP request smuggling, a related issue to CVE-2016-10711.