CVE-2021-22959

Mô tả

Tham khảo

• hackerone.com/reports/1238709 · Exploit
• debian.org/security/2022/dsa-5170 · Mailing List
• oracle.com/security-alerts/cpujan2022.html · Patch

Lỗ hổng khác của llhttp

• CVE-2022-35256TRUNG BÌNH 6.5The llhttp parser in the http module in Node v18.7.0 does not correctly handle header fields that are not terminated with CLRF. This may res…
• CVE-2022-32215TRUNG BÌNH 6.5The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not correctly handle multi-line Transfer-Encoding hea…
• CVE-2022-32214TRUNG BÌNH 6.5The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not strictly use the CRLF sequence to delimit HTTP re…
• CVE-2022-32213TRUNG BÌNH 6.5The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not correctly parse and validate Transfer-Encoding he…
• CVE-2021-22960TRUNG BÌNH 6.5The parse function in llhttp < 2.1.4 and < 6.0.6. ignores chunk extensions when parsing the body of chunked requests. This leads to HTTP Req…