HTTP::Daemon is a simple http server class written in perl. Versions prior to 6.15 are subject to a vulnerability which could potentially be exploited to gain privileged access to APIs or poison intermediate caches. It is uncertain how large the risks are, most Perl based applications are served on top of Nginx or Apache, not on the `HTTP::Daemon`. This library is commonly used for local development and tests. Users are advised to update to resolve this issue. Users unable to upgrade may add additional request handling logic as a mitigation. After calling `my $rqst = $conn->get_request()` one could inspect the returned `HTTP::Request` object. Querying the 'Content-Length' (`my $cl = $rqst->header('Content-Length')`) will show any abnormalities that should be dealt with by a `400` response. Expected strings of 'Content-Length' SHOULD consist of either a single non-negative integer, or, a comma separated repetition of that number. (that is `42` or `42, 42, 42`). Anything else MUST be rejected.

This plugin has been deprecated as it does not adhere to established standards for this style of check.

The version of perl-HTTP-Daemon installed on the remote host is prior to 6.01-8. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2405 advisory.

  - HTTP::Daemon is a simple http server class written in perl. Versions prior to 6.15 are subject to a     vulnerability which could potentially be exploited to gain privileged access to APIs or poison     intermediate caches. It is uncertain how large the risks are, most Perl based applications are served on     top of Nginx or Apache, not on the `HTTP::Daemon`. This library is commonly used for local development and     tests. Users are advised to update to resolve this issue. Users unable to upgrade may add additional     request handling logic as a mitigation. After calling `my $rqst = $conn->get_request()` one could inspect     the returned `HTTP::Request` object. Querying the 'Content-Length' (`my $cl = $rqst->header('Content-     Length')`) will show any abnormalities that should be dealt with by a `400` response. Expected strings of     'Content-Length' SHOULD consist of either a single non-negative integer, or, a comma separated repetition     of that number. (that is `42` or `42, 42, 42`). Anything else MUST be rejected. (CVE-2022-31081)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-247 advisory.

  - HTTP::Daemon is a simple http server class written in perl. Versions prior to 6.15 are subject to a     vulnerability which could potentially be exploited to gain privileged access to APIs or poison     intermediate caches. It is uncertain how large the risks are, most Perl based applications are served on     top of Nginx or Apache, not on the `HTTP::Daemon`. This library is commonly used for local development and     tests. Users are advised to update to resolve this issue. Users unable to upgrade may add additional     request handling logic as a mitigation. After calling `my $rqst = $conn->get_request()` one could inspect     the returned `HTTP::Request` object. Querying the 'Content-Length' (`my $cl = $rqst->header('Content-     Length')`) will show any abnormalities that should be dealt with by a `400` response. Expected strings of     'Content-Length' SHOULD consist of either a single non-negative integer, or, a comma separated repetition     of that number. (that is `42` or `42, 42, 42`). Anything else MUST be rejected. (CVE-2022-31081)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-748e811334 advisory.

    6.16      2023-02-24 03:07:14Z

      - Bump LWP::UserAgent to 6.37 in TestSuggests (GH#65) (Olaf Alders)

    ----

    6.15      2023-02-22 22:02:46Z

      - Fix CVE-2022-31081: Inconsistent Interpretation of HTTP Requests         Correctly handle multiple Content-Length headers and its variants         (Theo van Hoesel)         Closes Discrepancies in the Parsing of Content Length header ... (GH#56)         (blessingcharles)
      - kill test server with KILL rather than QUIT (GH#63) (Graham Knop)
      - Create TestServer test lib for running daemon process (GH#62) (Graham Knop)
      - Clean up tests (GH#61) (Graham Knop)

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-c230cc08c4 advisory.

    6.16      2023-02-24 03:07:14Z

      - Bump LWP::UserAgent to 6.37 in TestSuggests (GH#65) (Olaf Alders)

    6.15      2023-02-22 22:02:46Z

      - Fix CVE-2022-31081: Inconsistent Interpretation of HTTP Requests         Correctly handle multiple Content-Length headers and its variants         (Theo van Hoesel)         Closes Discrepancies in the Parsing of Content Length header ... (GH#56)         (blessingcharles)
      - kill test server with KILL rather than QUIT (GH#63) (Graham Knop)
      - Create TestServer test lib for running daemon process (GH#62) (Graham Knop)
      - Clean up tests (GH#61) (Graham Knop)

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-424636c7cb advisory.

     6.16      2023-02-24 03:07:14Z

      - Bump LWP::UserAgent to 6.37 in TestSuggests (GH#65) (Olaf Alders)

    ----

    6.15 2023-02-22 22:02:46Z

    * Fix CVE-2022-31081: Inconsistent Interpretation of HTTP Requests Correctly handle multiple Content-     Length headers and its variants (Theo van Hoesel) Closes Discrepancies in the Parsing of Content Length     header ... (GH#56) (blessingcharles)
    * kill test server with KILL rather than QUIT (GH#63) (Graham Knop)
    * Create TestServer test lib for running daemon process (GH#62) (Graham Knop)
    * Clean up tests (GH#61) (Graham Knop)

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3127 advisory.

  - HTTP::Daemon is a simple http server class written in perl. Versions prior to 6.15 are subject to a     vulnerability which could potentially be exploited to gain privileged access to APIs or poison     intermediate caches. It is uncertain how large the risks are, most Perl based applications are served on     top of Nginx or Apache, not on the `HTTP::Daemon`. This library is commonly used for local development and     tests. Users are advised to update to resolve this issue. Users unable to upgrade may add additional     request handling logic as a mitigation. After calling `my $rqst = $conn->get_request()` one could inspect     the returned `HTTP::Request` object. Querying the 'Content-Length' (`my $cl = $rqst->header('Content-     Length')`) will show any abnormalities that should be dealt with by a `400` response. Expected strings of     'Content-Length' SHOULD consist of either a single non-negative integer, or, a comma separated repetition     of that number. (that is `42` or `42, 42, 42`). Anything else MUST be rejected. (CVE-2022-31081)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:2874-1 advisory.

  - HTTP::Daemon is a simple http server class written in perl. Versions prior to 6.15 are subject to a     vulnerability which could potentially be exploited to gain privileged access to APIs or poison     intermediate caches. It is uncertain how large the risks are, most Perl based applications are served on     top of Nginx or Apache, not on the `HTTP::Daemon`. This library is commonly used for local development and     tests. Users are advised to update to resolve this issue. Users unable to upgrade may add additional     request handling logic as a mitigation. After calling `my $rqst = $conn->get_request()` one could inspect     the returned `HTTP::Request` object. Querying the 'Content-Length' (`my $cl = $rqst->header('Content-     Length')`) will show any abnormalities that should be dealt with by a `400` response. Expected strings of     'Content-Length' SHOULD consist of either a single non-negative integer, or, a comma separated repetition     of that number. (that is `42` or `42, 42, 42`). Anything else MUST be rejected. (CVE-2022-31081)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:2872-1 advisory.

  - HTTP::Daemon is a simple http server class written in perl. Versions prior to 6.15 are subject to a     vulnerability which could potentially be exploited to gain privileged access to APIs or poison     intermediate caches. It is uncertain how large the risks are, most Perl based applications are served on     top of Nginx or Apache, not on the `HTTP::Daemon`. This library is commonly used for local development and     tests. Users are advised to update to resolve this issue. Users unable to upgrade may add additional     request handling logic as a mitigation. After calling `my $rqst = $conn->get_request()` one could inspect     the returned `HTTP::Request` object. Querying the 'Content-Length' (`my $cl = $rqst->header('Content-     Length')`) will show any abnormalities that should be dealt with by a `400` response. Expected strings of     'Content-Length' SHOULD consist of either a single non-negative integer, or, a comma separated repetition     of that number. (that is `42` or `42, 42, 42`). Anything else MUST be rejected. (CVE-2022-31081)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 ESM host has a package installed that is affected by a vulnerability as referenced in the USN-5520-2 advisory.

    USN-5520-1 fixed a vulnerability in HTTP-Daemon. This update provides the corresponding update for Ubuntu     14.04 ESM and Ubuntu 16.04 ESM.



Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-5520-1 advisory.

    It was discovered that HTTP-Daemon incorrectly handled certain crafted requests. A remote attacker could     possibly use this issue to perform an HTTP Request Smuggling attack.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
196409	RHEL 7 : perl-http-daemon (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	medium
187834	Amazon Linux 2 : perl-HTTP-Daemon (ALAS-2024-2405)	Nessus	Amazon Linux Local Security Checks	medium
178537	Amazon Linux 2023 : perl-HTTP-Daemon, perl-HTTP-Daemon-tests (ALAS2023-2023-247)	Nessus	Amazon Linux Local Security Checks	medium
172458	Fedora 38 : perl-HTTP-Daemon (2023-748e811334)	Nessus	Fedora Local Security Checks	medium
172251	Fedora 36 : perl-HTTP-Daemon (2023-c230cc08c4)	Nessus	Fedora Local Security Checks	medium
172250	Fedora 37 : perl-HTTP-Daemon (2023-424636c7cb)	Nessus	Fedora Local Security Checks	medium
165685	Debian DLA-3127-1 : libhttp-daemon-perl - LTS security update	Nessus	Debian Local Security Checks	medium
164372	SUSE SLED15 / SLES15 Security Update : perl-HTTP-Daemon (SUSE-SU-2022:2874-1)	Nessus	SuSE Local Security Checks	medium
164367	SUSE SLES12 Security Update : perl-HTTP-Daemon (SUSE-SU-2022:2872-1)	Nessus	SuSE Local Security Checks	medium
163267	Ubuntu 16.04 ESM : HTTP-Daemon vulnerability (USN-5520-2)	Nessus	Ubuntu Local Security Checks	medium
163106	Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : HTTP-Daemon vulnerability (USN-5520-1)	Nessus	Ubuntu Local Security Checks	medium

Detections

Analytics

CVE-2022-31081

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium