Project

General

Profile

Actions
Copy link

Security #8947

closed
OT PA

htp: detection bypass of files due to mishandling of FHCRC field by gzip decompressor (8.0.x backport)

Security #8947: htp: detection bypass of files due to mishandling of FHCRC field by gzip decompressor (8.0.x backport)

Added by OISF Ticketbot 2 months ago. Updated about 1 month ago.

Status:
Closed
Priority:
Normal
Assignee:
Philippe Antoine
Target version:
8.0.7
Affected Versions:
Label:
CVE:
Git IDs:

4b79849d5075d7adf7aa0a7fdf03ec8b7e4f5dcc

Severity:
MODERATE
Disclosure Date:
11/02/2026
GHSA:
GHSA-4rpf-xpxp-v2mh

JI Updated by Jason Ish 2 months ago Actions
Copy link
 #1

  • Severity set to MODERATE

Apply severity from parent ticket: MODERATE.

JI Updated by Jason Ish 2 months ago Actions
Copy link
 #2

  • GHSA set to GHSA-4rpf-xpxp-v2mh

SB Updated by Shivani Bhardwaj about 2 months ago Actions
Copy link
 #3

  • Subject changed from htp: Gzip header parser returns Ok(0) on 1-byte CRC/XLEN fragment, desynchronising the deflate stream (detection bypass) (8.0.x backport) to htp: detection bypass of files due to mishandling of FHCRC field by gzip decompressor (8.0.x backport)

JI Updated by Jason Ish about 2 months ago Actions
Copy link
 #4

  • Disclosure Date set to 11/02/2026

PA Updated by Philippe Antoine about 2 months ago Actions
Copy link
 #5

  • Status changed from Assigned to Resolved

staged

JI Updated by Jason Ish about 2 months ago Actions
Copy link
 #6

  • Git IDs updated (diff)

JI Updated by Jason Ish about 1 month ago Actions
Copy link
 #7

  • Status changed from Resolved to Closed

JI Updated by Jason Ish about 1 month ago Actions
Copy link
 #8

  • Private changed from Yes to No
Actions
Copy link

Also available in: PDF Atom