CVE-2019-3833
14.03.2019, 22:29
Openwsman, versions up to and including 2.6.9, are vulnerable to infinite loop in process_connection() when parsing specially crafted HTTP requests. A remote, unauthenticated attacker can exploit this vulnerability by sending malicious HTTP request to cause denial of service to openwsman server.
| Vendor | Product | Version |
|---|---|---|
| openwsman_project | openwsman | 𝑥 ≤ 2.6.9 |
| opensuse | leap | 15.0 |
| opensuse | leap | 42.3 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Common Weakness Enumeration
References