Most recent entries from all

bdu:2023-07617

BREW-duplicity-CVE-2020-11078 — CRLF injection in httplib2

Affected: Homebrew: duplicity

### Impact Attacker controlling unescaped part of uri for `httplib2.Http.request()` could change request headers and body, send additional hidden requests to same server.

Impacts software that uses httplib2 with uri constructed by string concatenation, as opposed to proper urllib building with escaping.

### Patches Problem has been fixed in 0.18.0 Space, CR, LF characters are now quoted before any use. This solution should not impact any valid usage of httplib2 library, that is uri constructed by urllib.

### Workarounds Create URI with `urllib.parse` family functions: `urlencode`, `urlunsplit`.

```diff user_input = " HTTP/1.1\r\ninjected: attack\r\nignore-http:" -uri = "https://api.server/?q={}".format(user_input) +uri = urllib.parse.urlunsplit(("https", "api.server", "/v1", urllib.parse.urlencode({"q": user_input}), "")) http.request(uri) ```

### References https://cwe.mitre.org/data/definitions/93.html https://docs.python.org/3/library/urllib.parse.html

Thanks to Recar https://github.com/Ciyfly for finding vulnerability and discrete notification.

### For more information If you have any questions or comments about this advisory: * Open an issue in [httplib2](https://github.com/httplib2/httplib2/issues/new) * Email [current maintainer at 2020-05](mailto:temotor@gmail.com)

cnvd-2021-37699

EUVD-2026-40350

fkie_cve-2020-11078

In httplib2 before version 0.18.0, an attacker controlling unescaped part of uri for `httplib2.Http.request()` could change request headers and body, send additional hidden requests to same server. This vulnerability impacts software that uses httplib2 with uri constructed by string concatenation, as opposed to proper urllib building with escaping. This has been fixed in 0.18.0.

GHSA-gg84-qgv9-w4pq — CRLF injection in httplib2

Affected: PyPI: httplib2

### Impact Attacker controlling unescaped part of uri for `httplib2.Http.request()` could change request headers and body, send additional hidden requests to same server.

Impacts software that uses httplib2 with uri constructed by string concatenation, as opposed to proper urllib building with escaping.

### Workarounds Create URI with `urllib.parse` family functions: `urlencode`, `urlunsplit`.

### References https://cwe.mitre.org/data/definitions/93.html https://docs.python.org/3/library/urllib.parse.html

Thanks to Recar https://github.com/Ciyfly for finding vulnerability and discrete notification.

gsd-2020-11078

openSUSE-SU-2021:0772-1 — Security update for python-httplib2

Security update for python-httplib2

PYSEC-2020-46

Affected: PyPI: httplib2

RHSA-2021:2116 — Red Hat Security Advisory: Red Hat OpenStack Platform 16.1.6 (python-httplib2) security update

python-httplib2: CRLF injection via an attacker controlled unescaped part of uri for httplib2.Http.request function python-httplib2: Regular expression denial of service via malicious header

SUSE-SU-2021:1637-1 — Security update for python-httplib2

Security update for python-httplib2

UBUNTU-CVE-2020-11078

Affected: Ubuntu:14.04:LTS: python-httplib2, Ubuntu:16.04:LTS: python-httplib2, Ubuntu:18.04:LTS: python-httplib2, Ubuntu:20.04:LTS: python-httplib2

WID-SEC-W-2022-0193 — Red Hat Enterprise Linux: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um die Verfügbarkeit, Integrität und Vertraulichkeit zu gefährden.