CVE-2018-1000164

Published: 18/04/2018 Updated: 19/06/2019

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 446

Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

It exists that gunicorn improperly handled certain input. An attacker could potentially use this issue execute a cross-site scripting (XSS) attack.

Vulnerable Product	Search on Vulmon	Subscribe to Product
gunicorn gunicorn 19.4.5
debian debian linux 8.0
debian debian linux 7.0

Gunicorn could allow cross-site scripting (XSS) attacks ...

Debian Bug report logs - #896548 gunicorn: CVE-2018-1000164 Package: gunicorn; Maintainer for gunicorn is Chris Lamb <lamby@debianorg>; Source for gunicorn is src:gunicorn (PTS, buildd, popcon) Reported by: Chris Lamb <lamby@debianorg> Date: Sun, 22 Apr 2018 08:45:04 UTC Severity: grave Tags: security Found in ve ...

Unofficial library for working with Victims CVE database

victimsdb-lib This is an unofficial library for working with Victims CVE database Examples >>> from victimsdb_lib import VictimsDB >>> db = VictimsDBfrom_dir('database/') # or VictimsDBfrom_git_url('githubcom/fabric8-analytics/cvedbgit') >>> 'CVE-2018-1000164' in db True

Unofficial library for working with Victims CVE database

victimsdb-lib This is an unofficial library for working with Victims CVE database Examples >>> from victimsdb_lib import VictimsDB >>> db = VictimsDBfrom_dir('database/') # or VictimsDBfrom_git_url('githubcom/fabric8-analytics/cvedbgit') >>> 'CVE-2018-1000164' in db True

CWE-93 https://github.com/benoitc/gunicorn/issues/1227 https://epadillas.github.io/2018/04/02/http-header-splitting-in-gunicorn-19.4.5 https://lists.debian.org/debian-lts-announce/2018/04/msg00022.html https://www.debian.org/security/2018/dsa-4186 https://usn.ubuntu.com/4022-1/https://nvd.nist.gov https://usn.ubuntu.com/4022-1/

CVE-2018-1000164

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect