Request smuggling in HTTP::Daemon (CVE-2022-31081) References: - https://bugs.mageia.org/show_bug.cgi?id=30634 - https://ubuntu.com/security/notices/USN-5520-1 . MGASA-2022-0349 - Updated perl-HTTP-Daemon packages fix security vulnerability Publication date: 01 Oct 2022 URL: https://advisories.mageia.org/MGASA-2022-0349.html Type: security Affected Mageia releases: 8 CVE: CVE-2022-31081 Request smuggling in HTTP::Daemon (CVE-2022-31081) References: - https://bugs.mageia.org/show_bug.cgi?id=30634 - https://ubuntu.com/security/notices/USN-5520-1 - https://www.cve.org/CVERecord?id=CVE-2022-31081 SRPMS: - 8/core/perl-HTTP-Daemon-6.140.0-3.mga8 . Revised perl-HTTP-Daemon distributions rectify request smuggling vulnerability. Date of release: 01 Oct 2022.. Mageia 8 Security Update, HTTP Daemon Fix, Request Smuggling Vulnerability. . LinuxSecurity.com Team
HTTP-Daemon could allow HTTP Request Smuggling attacks.. =========================================================================Ubuntu Security Notice USN-5520-2 July 18, 2022 libhttp-daemon-perl vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 16.04 ESM - Ubuntu 14.04 ESM Summary: HTTP-Daemon could allow HTTP Request Smuggling attacks. Software Description: - libhttp-daemon-perl: simple http server class Details: USN-5520-1 fixed a vulnerability in HTTP-Daemon. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It was discovered that HTTP-Daemon incorrectly handled certain crafted requests. A remote attacker could possibly use this issue to perform an HTTP Request Smuggling attack. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 16.04 ESM: libhttp-daemon-perl 6.01-1ubuntu0.16.04~esm1 Ubuntu 14.04 ESM: libhttp-daemon-perl 6.01-1ubuntu0.14.04~esm1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-5520-2 https://ubuntu.com/security/notices/USN-5520-1 CVE-2022-31081 . Ubuntu Security Notice USN-5530-1 reports a vulnerability in the HTTP-Daemon, which may result in HTTP Request Smuggling exploits. Ensure your system is patched!. HTTP Daemon Vulnerability, Ubuntu Security Advisory, Request Smuggling Attack, libhttp-daemon-perl Exploit. . Severity: Critical. LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.