This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2019-17420 →
DEBIAN-CVE-2019-17420
In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol parsing error causes the http_header signature to not ale...
Original description
The description as published by the source.
In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol parsing error causes the http_header signature to not alert on a response with a single \r\n ending.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
libhtp
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.5.31-1"}]}]
Debian:13
libhtp
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.5.31-1"}]}]
References
- advisory security-tracker.debian.org