Skip to content
OpenAdvisories
High USN-5520-2 1 CVE

libhttp-daemon-perl vulnerability

Published Jul 18, 2022 · Updated Jun 29, 2026

Ecosystem: Ubuntu

Summary

USN-5520-1 fixed a vulnerability in HTTP-Daemon. This update provides
the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.

Original advisory details:

It was discovered that HTTP-Daemon incorrectly handled certain crafted
requests. A remote attacker could possibly use this issue to perform an
HTTP Request Smuggling attack.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS libhttp-daemon-perl 6.01-1ubuntu0.14.04~esm1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS libhttp-daemon-perl 6.01-1ubuntu0.16.04~esm1

Vulnerabilities 1

  • High 7.3
    CVE-2022-31081

    Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in HTTP::Daemon

    HTTP::Daemon is a simple http server class written in perl. Versions prior to 6.15 are subject to a vulnerability which could potentially be exploited to gain privileged access to APIs or poison intermediate caches. It is uncertain how large the risks are, mo…

    libwww-perl HTTP-Daemon libhttp-daemon-perl libhttp-daemon-perl Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2022-31081