Summary
It was discovered that Firefox could be made to incorrectly accept
newlines in HTTP/3 response headers. If a user were tricked into
opening a specially crafted website, an attacker could exploit this
to conduct header splitting attacks.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | firefox | 91.0.1+build1-0ubuntu0.18.04.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | firefox | 91.0.1+build1-0ubuntu0.20.04.1 |
Vulnerabilities 1
-
Unscored —
Firefox incorrectly accepted a newline in a HTTP/3 header, interpretting it as two separate headers. This allowed for a…
References
-
report
https://ubuntu.com/security/CVE-2021-29991