CVE-2012-4023 CRLF injection vulnerability in Pebble before 2.6.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
MediumCVSS 4.3
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
CRLF injection vulnerability in Pebble before 2.6.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| simon brown pebble | <= 2.6.3 | No fix listed |
| simon brown pebble | = 1.0 | No fix listed |
| simon brown pebble | = 1.1 | No fix listed |
| simon brown pebble | = 1.2 | No fix listed |
| simon brown pebble | = 1.3 | No fix listed |
| simon brown pebble | = 1.4 | No fix listed |
| simon brown pebble | = 1.4-beta1 | No fix listed |
| simon brown pebble | = 1.4-beta2 | No fix listed |
| simon brown pebble | = 1.4-beta3 | No fix listed |
| simon brown pebble | = 1.4.1 | No fix listed |
| simon brown pebble | = 1.4.2 | No fix listed |
| simon brown pebble | = 1.5 | No fix listed |
| simon brown pebble | = 1.5-beta1 | No fix listed |
| simon brown pebble | = 1.5-beta2 | No fix listed |
| simon brown pebble | = 1.5.1 | No fix listed |
| simon brown pebble | = 1.6-beta3 | No fix listed |
| simon brown pebble | = 1.7 | No fix listed |
| simon brown pebble | = 1.7-beta1 | No fix listed |
| simon brown pebble | = 1.7.1 | No fix listed |
| simon brown pebble | = 1.7.2 | No fix listed |
| simon brown pebble | = 1.8 | No fix listed |
| simon brown pebble | = 1.9 | No fix listed |
| simon brown pebble | = 2.0 | No fix listed |
| simon brown pebble | = 2.0.0-m1 | No fix listed |
| simon brown pebble | = 2.0.0-m2 | No fix listed |
Show 23 more
| Product | Affected versions | Fixed in |
|---|---|---|
| simon brown pebble | = 2.0.0-m3 | No fix listed |
| simon brown pebble | = 2.0.0-rc1 | No fix listed |
| simon brown pebble | = 2.0.0-rc2 | No fix listed |
| simon brown pebble | = 2.0.1 | No fix listed |
| simon brown pebble | = 2.1 | No fix listed |
| simon brown pebble | = 2.1-rc1 | No fix listed |
| simon brown pebble | = 2.2 | No fix listed |
| simon brown pebble | = 2.3 | No fix listed |
| simon brown pebble | = 2.3.1 | No fix listed |
| simon brown pebble | = 2.3.2 | No fix listed |
| simon brown pebble | = 2.4 | No fix listed |
| simon brown pebble | = 2.4-rc2 | No fix listed |
| simon brown pebble | = 2.5 | No fix listed |
| simon brown pebble | = 2.5-m1 | No fix listed |
| simon brown pebble | = 2.5-m2 | No fix listed |
| simon brown pebble | = 2.5-rc1 | No fix listed |
| simon brown pebble | = 2.5.1 | No fix listed |
| simon brown pebble | = 2.5.2 | No fix listed |
| simon brown pebble | = 2.5.3 | No fix listed |
| simon brown pebble | = 2.6 | No fix listed |
| simon brown pebble | = 2.6-m1 | No fix listed |
| simon brown pebble | = 2.6.1 | No fix listed |
| simon brown pebble | = 2.6.2 | No fix listed |
References
- JVN#39563771 third-party-advisory
- JVNDB-2012-000099 third-party-advisory
- 51102 third-party-advisory