1995267 – (CVE-2021-29991) CVE-2021-29991 Mozilla: Header Splitting possible with HTTP/3 Responses

Bug 1995267 (CVE-2021-29991) - CVE-2021-29991 Mozilla: Header Splitting possible with HTTP/3 Responses

Summary: CVE-2021-29991 Mozilla: Header Splitting possible with HTTP/3 Responses

Keywords:
Status:	NEW
Alias:	CVE-2021-29991
Product:	Security Response
Classification:	Other
Component:	vulnerability
Sub Component:
Version:	unspecified
Hardware:	All
OS:	Linux
Priority:	high
Severity:	high
Target Milestone:	---
Assignee:	Nobody
QA Contact:
Docs Contact:
URL:
Whiteboard:
Depends On:	1996585 1996586 1996588 1996589 1996590 1996591 1996592 1996593 1996594 1996595 1996596 1996597
Blocks:	1995268
TreeView+	depends on / blocked

Reported:	2021-08-18 17:24 UTC by Pedro Sampaio
Modified:	2024-10-28 11:13 UTC (History)
CC List:	7 users (show)
Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments	(Terms of Use)

Description Pedro Sampaio 2021-08-18 17:24:29 UTC

Firefox incorrectly accepted a newline in a HTTP/3 header, interpreting it as two separate headers. This allowed for a header splitting attack against servers using HTTP/3.

References:

https://www.mozilla.org/en-US/security/advisories/mfsa2021-37/

Note You need to log in before you can comment on or make changes to this bug.