CVE-2017-18587
headers containing newline characters can split messages
5.3
MEDIUM
CVSS 3.1
EPSS 1.0%
Description
Serializing of headers to the socket did not filter the values for newline bytes (`\r` or `\n`), which allowed for header values to split a request or response. People would not likely include newlines in the headers in their own applications, so the way for most people to exploit this is if an application constructs headers based on unsanitized user input. This issue was fixed by replacing all newline characters with a space during serialization of a header value.
How to fix CVE-2017-18587
To remediate CVE-2017-18587, upgrade the affected package to a fixed version below.
- —upgrade to 0.10.2 or later
- —upgrade to 0.9.18 or later
Is CVE-2017-18587 being exploited?
Low — EPSS is 1.0%, meaning exploitation activity has not been observed at scale.
Affected packages (2)
- >= 0.10.0, < 0.10.2
- >= 0.0.0-0, < 0.9.18, >= 0.10.0, < 0.10.2
CVSS scores
| Source | Version | Severity | Vector |
|---|---|---|---|
| osv | CVSS 3.1 | MEDIUM5.3 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N |