This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2020-1695 →
DEBIAN-CVE-2020-1695
A flaw was found in all resteasy 3.x.x versions prior to 3.12.0.Final and all resteasy 4.x.x versions prior to 4.6.0.Final, where an improper input va...
Original description
The description as published by the source.
A flaw was found in all resteasy 3.x.x versions prior to 3.12.0.Final and all resteasy 4.x.x versions prior to 4.6.0.Final, where an improper input validation results in returning an illegal header that integrates into the server's response. This flaw may result in an injection, which leads to unexpected behavior when the HTTP response is constructed.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
resteasy3.0
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.26-2"}]}]
Debian:13
resteasy3.0
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.26-2"}]}]
Debian:14
resteasy3.0
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.26-2"}]}]
References
- advisory security-tracker.debian.org