https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 14:20:50 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-05817 bdu:2022-05817 https://cve.radiocsirt.org/vuln/bdu:2022-05817 https://cve.radiocsirt.org/vuln/bell-cve-2022-31081 <p><strong>Affected:</strong> Alpaquita:23: perl-http-daemon, Alpaquita:stream: perl-http-daemon</p> <p><strong>Affected:</strong> Alpaquita:23: perl-http-daemon, Alpaquita:stream: perl-http-daemon</p> https://cve.radiocsirt.org/vuln/bell-cve-2022-31081 https://cve.radiocsirt.org/vuln/brew-texlive-cve-2022-31081 <p><strong>Affected:</strong> Homebrew: texlive</p> <p>HTTP::Daemon is a simple http server class written in perl. Versions prior to 6.15 are subject to a vulnerability which could potentially be exploited to gain privileged access to APIs or poison intermediate caches. It is uncertain how large the risks are, most Perl based applications are served on top of Nginx or Apache, not on the `HTTP::Daemon`. This library is commonly used for local development and tests. Users are advised to update to resolve this issue. Users unable to upgrade may add additional request handling logic as a mitigation. After calling `my $rqst = $conn-&gt;get_request()` one could inspect the returned `HTTP::Request` object. Querying the &#39;Content-Length&#39; (`my $cl = $rqst-&gt;header(&#39;Content-Length&#39;)`) will show any abnormalities that should be dealt with by a `400` response. Expected strings of &#39;Content-Length&#39; SHOULD consist of either a single non-negative integer, or, a comma separated repetition of that number. (that is `42` or `42, 42, 42`). Anything else MUST be rejected.</p> <p><strong>Affected:</strong> Homebrew: texlive</p> <p>HTTP::Daemon is a simple http server class written in perl. Versions prior to 6.15 are subject to a vulnerability which could potentially be exploited to gain privileged access to APIs or poison intermediate caches. It is uncertain how large the risks are, most Perl based applications are served on top of Nginx or Apache, not on the `HTTP::Daemon`. This library is commonly used for local development and tests. Users are advised to update to resolve this issue. Users unable to upgrade may add additional request handling logic as a mitigation. After calling `my $rqst = $conn-&gt;get_request()` one could inspect the returned `HTTP::Request` object. Querying the &#39;Content-Length&#39; (`my $cl = $rqst-&gt;header(&#39;Content-Length&#39;)`) will show any abnormalities that should be dealt with by a `400` response. Expected strings of &#39;Content-Length&#39; SHOULD consist of either a single non-negative integer, or, a comma separated repetition of that number. (that is `42` or `42, 42, 42`). Anything else MUST be rejected.</p> https://cve.radiocsirt.org/vuln/brew-texlive-cve-2022-31081 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0356 certfr-2023-avi-0356 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0356 https://cve.radiocsirt.org/vuln/euvd-2026-232695 EUVD-2026-232695 https://cve.radiocsirt.org/vuln/euvd-2026-232695 https://cve.radiocsirt.org/vuln/fkie_cve-2022-31081 <p>HTTP::Daemon is a simple http server class written in perl. Versions prior to 6.15 are subject to a vulnerability which could potentially be exploited to gain privileged access to APIs or poison intermediate caches. It is uncertain how large the risks are, most Perl based applications are served on top of Nginx or Apache, not on the `HTTP::Daemon`. This library is commonly used for local development and tests. Users are advised to update to resolve this issue. Users unable to upgrade may add additional request handling logic as a mitigation. After calling `my $rqst = $conn-&gt;get_request()` one could inspect the returned `HTTP::Request` object. Querying the &#39;Content-Length&#39; (`my $cl = $rqst-&gt;header(&#39;Content-Length&#39;)`) will show any abnormalities that should be dealt with by a `400` response. Expected strings of &#39;Content-Length&#39; SHOULD consist of either a single non-negative integer, or, a comma separated repetition of that number. (that is `42` or `42, 42, 42`). Anything else MUST be rejected.</p> <p>HTTP::Daemon is a simple http server class written in perl. Versions prior to 6.15 are subject to a vulnerability which could potentially be exploited to gain privileged access to APIs or poison intermediate caches. It is uncertain how large the risks are, most Perl based applications are served on top of Nginx or Apache, not on the `HTTP::Daemon`. This library is commonly used for local development and tests. Users are advised to update to resolve this issue. Users unable to upgrade may add additional request handling logic as a mitigation. After calling `my $rqst = $conn-&gt;get_request()` one could inspect the returned `HTTP::Request` object. Querying the &#39;Content-Length&#39; (`my $cl = $rqst-&gt;header(&#39;Content-Length&#39;)`) will show any abnormalities that should be dealt with by a `400` response. Expected strings of &#39;Content-Length&#39; SHOULD consist of either a single non-negative integer, or, a comma separated repetition of that number. (that is `42` or `42, 42, 42`). Anything else MUST be rejected.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-31081 https://cve.radiocsirt.org/vuln/gsd-2022-31081 gsd-2022-31081 https://cve.radiocsirt.org/vuln/gsd-2022-31081 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12216-1 <p>perl-HTTP-Daemon-6.14-2.1 on GA media</p> <p>perl-HTTP-Daemon-6.14-2.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:12216-1 https://cve.radiocsirt.org/vuln/suse-su-2022:2872-1 <p>Security update for perl-HTTP-Daemon</p> <p>Security update for perl-HTTP-Daemon</p> https://cve.radiocsirt.org/vuln/suse-su-2022:2872-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-31081 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libhttp-daemon-perl, Ubuntu:Pro:16.04:LTS: libhttp-daemon-perl, Ubuntu:18.04:LTS: libhttp-daemon-perl, Ubuntu:20.04:LTS: libhttp-daemon-perl, Ubuntu:22.04:LTS: libhttp-daemon-perl</p> <p>HTTP::Daemon is a simple http server class written in perl. Versions prior to 6.15 are subject to a vulnerability which could potentially be exploited to gain privileged access to APIs or poison intermediate caches. It is uncertain how large the risks are, most Perl based applications are served on top of Nginx or Apache, not on the `HTTP::Daemon`. This library is commonly used for local development and tests. Users are advised to update to resolve this issue. Users unable to upgrade may add additional request handling logic as a mitigation. After calling `my $rqst = $conn-&gt;get_request()` one could inspect the returned `HTTP::Request` object. Querying the &#39;Content-Length&#39; (`my $cl = $rqst-&gt;header(&#39;Content-Length&#39;)`) will show any abnormalities that should be dealt with by a `400` response. Expected strings of &#39;Content-Length&#39; SHOULD consist of either a single non-negative integer, or, a comma separated repetition of that number. (that is `42` or `42, 42, 42`). Anything else MUST be rejected.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libhttp-daemon-perl, Ubuntu:Pro:16.04:LTS: libhttp-daemon-perl, Ubuntu:18.04:LTS: libhttp-daemon-perl, Ubuntu:20.04:LTS: libhttp-daemon-perl, Ubuntu:22.04:LTS: libhttp-daemon-perl</p> <p>HTTP::Daemon is a simple http server class written in perl. Versions prior to 6.15 are subject to a vulnerability which could potentially be exploited to gain privileged access to APIs or poison intermediate caches. It is uncertain how large the risks are, most Perl based applications are served on top of Nginx or Apache, not on the `HTTP::Daemon`. This library is commonly used for local development and tests. Users are advised to update to resolve this issue. Users unable to upgrade may add additional request handling logic as a mitigation. After calling `my $rqst = $conn-&gt;get_request()` one could inspect the returned `HTTP::Request` object. Querying the &#39;Content-Length&#39; (`my $cl = $rqst-&gt;header(&#39;Content-Length&#39;)`) will show any abnormalities that should be dealt with by a `400` response. Expected strings of &#39;Content-Length&#39; SHOULD consist of either a single non-negative integer, or, a comma separated repetition of that number. (that is `42` or `42, 42, 42`). Anything else MUST be rejected.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-31081 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1022 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Communications Applications ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Communications Applications ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1022