Skip to content
OpenAdvisories
High USN-5520-1 1 CVE

libhttp-daemon-perl vulnerability

Published Jul 14, 2022 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

It was discovered that HTTP-Daemon incorrectly handled certain crafted
requests. A remote attacker could possibly use this issue to perform an
HTTP Request Smuggling attack.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS libhttp-daemon-perl 6.01-1ubuntu0.1
Ubuntu · 20.04 LTS 20.04:LTS libhttp-daemon-perl 6.06-1ubuntu0.1
Ubuntu · 22.04 LTS 22.04:LTS libhttp-daemon-perl 6.13-1ubuntu0.1

Vulnerabilities 1

  • High 7.3
    CVE-2022-31081

    Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in HTTP::Daemon

    HTTP::Daemon is a simple http server class written in perl. Versions prior to 6.15 are subject to a vulnerability which could potentially be exploited to gain privileged access to APIs or poison intermediate caches. It is uncertain how large the risks are, mo…

    libwww-perl HTTP-Daemon libhttp-daemon-perl libhttp-daemon-perl Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2022-31081