CVE-2017-7443

apt-cacher before 1.7.15 and apt-cacher-ng before 3.4 allow HTTP response splitting via encoded newline characters, related to lack of blocking for the %0[ad] regular expression.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2017-04-05

Last modified

2024-09-16

Weaknesses

CWE-113

Affected products

• Apt-cacher-ng (Apt-cacher-ng Project)
• Apt-cacher (Apt-cacher Project)

References

• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=858739
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=858833