CVE-2017-7443 Other in n/a
Attackers can perform HTTP response splitting in apt-cacher and apt-cacher-ng by injecting encoded newline characters into requests.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2017-7443?
CVE-2017-7443 is a medium-severity vulnerability in n/a, published on 5 Apr 2017. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
apt-cacher before 1.7.15 and apt-cacher-ng before 3.4 allow HTTP response splitting via encoded newline characters, related to lack of blocking for the %0[ad] regular expression.
Weakness: CWE-113
Which versions are affected by CVE-2017-7443?
It affects 2 products.
Products include Apt-Cacher-Ng Project Apt-Cacher-Ng, Apt-Cacher Project Apt-Cacher.
How do I fix CVE-2017-7443?
Upgrade to a fixed version.
Is CVE-2017-7443 being exploited?
There is no known exploitation of CVE-2017-7443 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as DEBIAN-CVE-2017-7443, DLA-873-1, GHSA-w6gh-25j9-8fm4, UBUNTU-CVE-2017-7443.