NetSight
medium6.1

CVE-2017-7443

apt-cacher before 1.7.15 and apt-cacher-ng before 3.4 allow HTTP response splitting via encoded newline characters, related to lack of blocking for the %0[ad] …

Impact

apt-cacher before 1.7.15 and apt-cacher-ng before 3.4 allow HTTP response splitting via encoded newline characters, related to lack of blocking for the %0[ad] regular expression.

Affected products

VendorProductAffected versions
Apt-Cacher-Ng ProjectApt-Cacher-Ng
through 3.3
Apt-Cacher ProjectApt-Cacher
through 1.7.13

Weakness classification

References