CVE-2019-17420
In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol...
In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol parsing error causes the http_header signature to not alert on a response with a single \r\n ending.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- Low
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol parsing error causes the http_header signature to not alert on a response with a single \r\n ending.
- Record
CVE-2019-17420- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:N - Weakness
- CWE-459
- Updated
- 2026-11-02
CVE List No score
In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol parsing error causes the http_header signature to not alert on a response with a single \r\n ending.
- Record
CVE-2019-17420- Updated
- 2026-11-02
EUVDEUVD-2019-7816 No score
In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol parsing error causes the http_header signature to not alert on a response with a single \r\n ending.
- Record
EUVD-2019-7816- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9gx8-hhv8-hw56 No score
In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol...
In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol parsing error causes the http_header signature to not alert on a response with a single \r\n ending.
- Record
GHSA-9gx8-hhv8-hw56- Weakness
- CWE-20
- Updated
- 2026-11-02
OSV
In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol parsing error causes the http_header signature to not alert on a response with a single \r\n ending.
- Record
CVE-2019-17420- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
OSVDEBIAN-CVE-2019-17420
In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol parsing error causes the http_header signature to not alert on a response with a single \r\n ending.
- Record
DEBIAN-CVE-2019-17420- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
OSVUBUNTU-CVE-2019-17420
In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol parsing error causes the http_header signature to not alert on a response with a single \r\n ending.
- Record
UBUNTU-CVE-2019-17420- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libhtpDebian:12 |
before 1:0.5.31-1 | 1:0.5.31-1 |
libhtpDebian:13 |
before 1:0.5.31-1 | 1:0.5.31-1 |
libhtpUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 0.5.15-10.5.15-1ubuntu0.1~esm1 |
None known |
libhtpUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 1:0.5.25-11:0.5.26-11:0.5.26-1ubuntu0.1~esm1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-17420 is a medium vulnerability (CVSS 5.3) in Oisf Libhtp, published October 9, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.35%, the 71st percentile. Fixed in libhtp 1:0.5.31-1.
References
redmine.openinfosecfoundation.org/issues/2969
github.com/OISF/libhtp/compare/0.5.30...0.5.31
nvd.nist.gov/vuln/detail/CVE-2019-17420
security-tracker.debian.org/tracker/CVE-2019-17420
ubuntu.com/security/CVE-2019-17420
cve.org/CVERecord?id=CVE-2019-17420