HTTP Protocol Parsing Error in Suricata and OISF LibHTP
CVE-2019-17420

5.3MEDIUM

Key Information:

Vendor: Suricata-ids
Status: Suricata; Libhtp
Vendor: CVE Published:; 10 October 2019

🔔 Create Suricata-ids Vulnerability Alert

What is CVE-2019-17420?

In OISF LibHTP versions before 0.5.31, an issue exists where the HTTP protocol parser fails to alert on header signatures for responses concluded with a single carriage return and newline sequence. This flaw can lead to undetected anomalies in HTTP responses, affecting security monitoring and analysis capabilities in Suricata and associated products.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch