Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Mageia 7 Security Alert: MGASA-2021-0314 Critical HttpComponents Issue

mageia
Calendar Grey July 6, 2021
Dist Mageia Esm H88
MGASA-2021-0314 highlights a vulnerability in HttpComponents Client that impacts how requests are executed and which hosts are targeted.
Priyank Nigam discovered that HttpComponents Client could misinterpret malformed authority component in a request URI and pick the wrong target host for request execution (CVE-2020...

Summary

Priyank Nigam discovered that HttpComponents Client could misinterpret malformed authority component in a request URI and pick the wrong target host for request execution (CVE-2020-13956).

References

- https://bugs.mageia.org/show_bug.cgi?id=27389

- https://lists.debian.org/debian-security-announce/2020/msg00179.html

- https://www.cve.org/CVERecord?id=CVE-2020-13956

Topics%20covered

Topics Covered

security advisory security issue critical Mageia HttpComponents Client request execution malformed URI

Resolution

SRPMS

- 7/core/httpcomponents-client-4.5.5-1.1.mga7

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 06 Jul 2021
URL: https://advisories.mageia.org/MGASA-2021-0314.html
Type: security
CVE: CVE-2020-13956

Topics%20covered

Topics Covered

security advisory security issue critical Mageia HttpComponents Client request execution malformed URI

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here