CVE-2019-16254

Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows HTTP Response Splitting. If a program using WEBrick inserts untrusted input into the response header, an attacker can exploit it to insert a newline character to split a header, and inject malicious content to deceive clients. NOTE: this issue exists because of an incomplete fix for CVE-2017-17742, which addressed the CRLF vector, but did not address an isolated CR or an isolated LF.

References

Affected packages

Git / github.com/ruby/ruby

Affected ranges

Type

GIT

Repo

https://github.com/ruby/ruby

Events

Introduced

Last affected

d40ea2afa6ff5a6e5befcf342fb7b6dc58796b20

Introduced

d4bb726b713658f56e630b6cf817a0155b6f390e

Last affected

c91478058505cd8cae5160c1056bcde65af5a78b

Introduced

4e0a512972cdcbfcd5279f1a2a81ba342ed75b6e

Last affected

189a36cfabfc30e785cece0692c802be87ebd9cf

Introduced

c1af7b1e1d408f9796a5f46c9ed36bc5adea4aa2

Last affected

6315e42c222d5484004494950c7524a85acadb20

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0"
        },
        {
            "introduced": "2.4.0"
        },
        {
            "last_affected": "2.4.7"
        },
        {
            "introduced": "2.5.0"
        },
        {
            "last_affected": "2.5.6"
        },
        {
            "introduced": "2.6.0"
        },
        {
            "last_affected": "2.6.4"
        }
    ]
}

Database specific

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.0"
            }
        ]
    }
]

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-16254.json"