Oval Definition:	oval:org.opensuse.security:def:201918802
Revision Date: 2023-06-22 Version: 1 Title: CVE-2019-18802 Description: An issue was discovered in Envoy 1.12.0. An untrusted remote client may send an HTTP header (such as Host) with whitespace after the header content. Envoy will treat "header-value " as a different string from "header-value" so for example with the Host header "example.com " one could bypass "example.com" matchers. Family: unix Class: vulnerability Status: Reference(s): CVE-2019-18802 SUSE-CU-2020:110-1 SUSE-CU-2020:111-1 SUSE-CU-2020:113-1 SUSE-CU-2020:118-1 SUSE-CU-2020:119-1 SUSE-CU-2020:120-1 SUSE-CU-2020:121-1 SUSE-CU-2020:122-1 SUSE-CU-2020:164-1 SUSE-CU-2020:165-1 SUSE-CU-2020:166-1 SUSE-CU-2020:168-1 SUSE-CU-2020:196-1 SUSE-CU-2020:197-1 SUSE-CU-2020:198-1 SUSE-CU-2020:199-1 SUSE-CU-2020:200-1 SUSE-CU-2020:201-1 SUSE-CU-2020:385-1 SUSE-CU-2020:389-1 SUSE-CU-2020:94-1 SUSE-CU-2020:95-1 SUSE-SU-2020:0722-1 SUSE-SU-2020:1573-1 openSUSE-SU-2020:0379-1 Mitre CVE-2019-18802 SUSE CVE-2019-18802 SUSE-CU-2020:110-1 SUSE-CU-2020:111-1 SUSE-CU-2020:113-1 SUSE-CU-2020:118-1 SUSE-CU-2020:119-1 SUSE-CU-2020:120-1 SUSE-CU-2020:121-1 SUSE-CU-2020:122-1 SUSE-CU-2020:164-1 SUSE-CU-2020:165-1 SUSE-CU-2020:166-1 SUSE-CU-2020:168-1 SUSE-CU-2020:196-1 SUSE-CU-2020:197-1 SUSE-CU-2020:198-1 SUSE-CU-2020:199-1 SUSE-CU-2020:200-1 SUSE-CU-2020:201-1 SUSE-CU-2020:385-1 SUSE-CU-2020:389-1 SUSE-CU-2020:773-1 SUSE-CU-2020:774-1 SUSE-CU-2020:781-1 SUSE-CU-2020:782-1 SUSE-CU-2020:784-1 SUSE-CU-2020:787-1 SUSE-CU-2020:788-1 SUSE-CU-2020:789-1 SUSE-CU-2020:790-1 SUSE-CU-2020:793-1 SUSE-CU-2020:796-1 SUSE-CU-2020:797-1 SUSE-CU-2020:798-1 SUSE-CU-2020:799-1 SUSE-CU-2020:800-1 SUSE-CU-2020:801-1 SUSE-CU-2020:802-1 SUSE-CU-2020:94-1 SUSE-CU-2020:95-1 SUSE-SU-2020:0722-1 SUSE-SU-2020:1573-1 openSUSE-SU-2020:0379-1 openSUSE-SU-2021:0341-1 SUSE-CU-2022:81-1 Platform(s): Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server openSUSE Leap 15.1 openSUSE Leap 15.2 openSUSE Leap 15.3 openSUSE Leap 15.4 SUSE CaaS Platform 4.0 SUSE Linux Enterprise Desktop 15 SP1 SUSE Linux Enterprise Desktop 15 SP2 SUSE Linux Enterprise Desktop 15 SP3 SUSE Linux Enterprise Desktop 15 SP4 SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP1 SUSE Linux Enterprise High Performance Computing 15 SP2 SUSE Linux Enterprise High Performance Computing 15 SP3 SUSE Linux Enterprise High Performance Computing 15 SP4 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 SUSE Linux Enterprise Server 15 SP1 SUSE Linux Enterprise Server 15 SP2 SUSE Linux Enterprise Server 15 SP3 SUSE Linux Enterprise Server 15 SP4 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Storage 6 SUSE Linux Enterprise Storage 7 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.0 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.0 SUSE Manager Retail Branch Server 4.1 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.0 SUSE Manager Server 4.1 SUSE Manager Server 4.2 SUSE Manager Server 4.3 Product(s): Definition Synopsis Release Information SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed AND libnghttp2-14-1.40.0-3.6 is installed OR libnghttp2-14-32bit-1.40.0-3.6 is installed OR libnghttp2-devel-1.40.0-3.6 is installed OR libnghttp2_asio-devel-1.40.0-3.6 is installed OR libnghttp2_asio1-1.40.0-3.6 is installed OR nghttp2-1.40.0-3.6 is installed OR Package Information SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 is installed AND libnghttp2_asio1-32bit-1.40.0-3.6 is installed OR nghttp2-1.40.0-3.6 is installed OR nghttp2-python-1.40.0-3.6 is installed OR python3-nghttp2-1.40.0-3.6 is installed Definition Synopsis openSUSE Leap 15.1 is installed AND Package Information libnghttp2-14-1.40.0-lp151.3.6.1 is installed AND libnghttp2-14 is signed with openSUSE key OR libnghttp2-14-32bit-1.40.0-lp151.3.6.1 is installed AND libnghttp2-14-32bit is signed with openSUSE key OR libnghttp2-devel-1.40.0-lp151.3.6.1 is installed AND libnghttp2-devel is signed with openSUSE key OR libnghttp2_asio-devel-1.40.0-lp151.3.6.1 is installed AND libnghttp2_asio-devel is signed with openSUSE key OR libnghttp2_asio1-1.40.0-lp151.3.6.1 is installed AND libnghttp2_asio1 is signed with openSUSE key OR libnghttp2_asio1-32bit-1.40.0-lp151.3.6.1 is installed AND libnghttp2_asio1-32bit is signed with openSUSE key OR nghttp2-1.40.0-lp151.3.6.1 is installed AND nghttp2 is signed with openSUSE key OR python3-nghttp2-1.40.0-lp151.3.6.1 is installed AND python3-nghttp2 is signed with openSUSE key Definition Synopsis openSUSE Leap 15.2 is installed AND Package Information libnghttp2-14-1.40.0-lp152.2.3.1 is installed AND libnghttp2-14 is signed with openSUSE key OR libnghttp2-14-32bit-1.40.0-lp152.2.3.1 is installed AND libnghttp2-14-32bit is signed with openSUSE key OR libnghttp2-devel-1.40.0-lp152.2.3.1 is installed AND libnghttp2-devel is signed with openSUSE key OR libnghttp2_asio-devel-1.40.0-lp152.2.3.1 is installed AND libnghttp2_asio-devel is signed with openSUSE key OR libnghttp2_asio1-1.40.0-lp152.2.3.1 is installed AND libnghttp2_asio1 is signed with openSUSE key OR libnghttp2_asio1-32bit-1.40.0-lp152.2.3.1 is installed AND libnghttp2_asio1-32bit is signed with openSUSE key OR nghttp2-1.40.0-lp152.2.3.1 is installed AND nghttp2 is signed with openSUSE key OR python3-nghttp2-1.40.0-lp152.2.3.1 is installed AND python3-nghttp2 is signed with openSUSE key Definition Synopsis Release Information SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed AND libnghttp2-14-1.40.0-3.6 is installed OR libnghttp2-14-32bit-1.40.0-3.6 is installed OR libnghttp2-devel-1.40.0-3.6 is installed OR libnghttp2_asio-devel-1.40.0-3.6 is installed OR libnghttp2_asio1-1.40.0-3.6 is installed OR nghttp2-1.40.0-3.6 is installed OR Package Information SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 is installed AND libnghttp2_asio1-32bit-1.40.0-3.6 is installed OR nghttp2-1.40.0-3.6 is installed OR nghttp2-python-1.40.0-3.6 is installed OR python3-nghttp2-1.40.0-3.6 is installed OR Package Information SUSE CaaS Platform 4.0 is installed AND caasp-release-4.2.1-24.23 is installed OR skuba-1.3.5-3.39 is installed OR skuba-update-1.3.5-3.39 is installed OR terraform-provider-vsphere-1.17.3-3.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Basesystem 15 SP2 is installed AND Package Information libnghttp2-14-1.40.0-1 is installed OR libnghttp2-14-32bit-1.40.0-1 is installed OR libnghttp2-devel-1.40.0-1 is installed OR libnghttp2_asio-devel-1.40.0-1 is installed OR libnghttp2_asio1-1.40.0-1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed AND libnghttp2-14-1.40.0-3.6 is installed OR libnghttp2-14-32bit-1.40.0-3.6 is installed OR libnghttp2-devel-1.40.0-3.6 is installed OR libnghttp2_asio-devel-1.40.0-3.6 is installed OR libnghttp2_asio1-1.40.0-3.6 is installed OR nghttp2-1.40.0-3.6 is installed OR Package Information SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 is installed AND libnghttp2_asio1-32bit-1.40.0-3.6 is installed OR nghttp2-1.40.0-3.6 is installed OR nghttp2-python-1.40.0-3.6 is installed OR python3-nghttp2-1.40.0-3.6 is installed OR Package Information SUSE Linux Enterprise Module for Basesystem 15 SP2 is installed AND libnghttp2-14-1.40.0-1 is installed OR libnghttp2-14-32bit-1.40.0-1 is installed OR libnghttp2-devel-1.40.0-1 is installed OR libnghttp2_asio-devel-1.40.0-1 is installed OR libnghttp2_asio1-1.40.0-1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed AND libnghttp2-14-1.40.0-3.6.3 is installed OR libnghttp2-14-32bit-1.40.0-3.6.3 is installed OR libnghttp2-devel-1.40.0-3.6.3 is installed OR libnghttp2_asio-devel-1.40.0-3.6.3 is installed OR libnghttp2_asio1-1.40.0-3.6.3 is installed OR Package Information SUSE CaaS Platform 4.0 is installed AND caasp-release-4.2.1-24.23.4 is installed OR skuba-1.3.5-3.39.1 is installed OR skuba-update-1.3.5-3.39.1 is installed OR terraform-provider-vsphere-1.17.3-3.3.4 is installed Definition Synopsis SUSE Linux Enterprise Module for Basesystem 15 SP2 is installed AND Package Information libnghttp2-14-1.40.0-1.15 is installed OR libnghttp2-14-32bit-1.40.0-1.15 is installed OR libnghttp2-devel-1.40.0-1.15 is installed OR libnghttp2_asio-devel-1.40.0-1.15 is installed OR libnghttp2_asio1-1.40.0-1.15 is installed Definition Synopsis Release Information SUSE Linux Enterprise Module for Basesystem 15 SP2 is installed AND libnghttp2-14-1.40.0-1.15 is installed OR libnghttp2-14-32bit-1.40.0-1.15 is installed OR libnghttp2-devel-1.40.0-1.15 is installed OR libnghttp2_asio-devel-1.40.0-1.15 is installed OR libnghttp2_asio1-1.40.0-1.15 is installed OR Package Information SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed AND libnghttp2-14-1.40.0-3.6.3 is installed OR libnghttp2-14-32bit-1.40.0-3.6.3 is installed OR libnghttp2-devel-1.40.0-3.6.3 is installed OR libnghttp2_asio-devel-1.40.0-3.6.3 is installed OR libnghttp2_asio1-1.40.0-3.6.3 is installed OR Package Information SUSE Linux Enterprise Module for Basesystem 15 SP3 is installed AND libnghttp2-14-1.40.0-3.5.1 is installed OR libnghttp2-14-32bit-1.40.0-3.5.1 is installed OR libnghttp2-devel-1.40.0-3.5.1 is installed OR libnghttp2_asio-devel-1.40.0-3.5.1 is installed OR libnghttp2_asio1-1.40.0-3.5.1 is installed Definition Synopsis SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed AND Package Information libnghttp2-14-1.40.0-3.6.3 is installed OR libnghttp2-14-32bit-1.40.0-3.6.3 is installed OR libnghttp2-devel-1.40.0-3.6.3 is installed OR libnghttp2_asio-devel-1.40.0-3.6.3 is installed OR libnghttp2_asio1-1.40.0-3.6.3 is installed Definition Synopsis Release Information SUSE Linux Enterprise Desktop 15 SP3 is installed OR SUSE Linux Enterprise High Performance Computing 15 SP3 is installed OR SUSE Linux Enterprise Module for Basesystem 15 SP3 is installed OR SUSE Linux Enterprise Server 15 SP3 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP3 is installed OR SUSE Linux Enterprise Storage 7.1 is installed OR SUSE Manager Proxy 4.2 is installed OR SUSE Manager Retail Branch Server 4.2 is installed OR SUSE Manager Server 4.2 is installed AND Package Information libnghttp2-14-1.40.0-3.5.1 is installed OR libnghttp2-14-32bit-1.40.0-3.5.1 is installed OR libnghttp2-devel-1.40.0-3.5.1 is installed OR libnghttp2_asio-devel-1.40.0-3.5.1 is installed OR libnghttp2_asio1-1.40.0-3.5.1 is installed Definition Synopsis Release Information Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy is installed OR Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server is installed OR Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy is installed OR Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server is installed OR Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy is installed OR Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server is installed AND libnghttp2-14-1.40.0-3.6.3 is installed OR Package Information SUSE Linux Enterprise Desktop 15 SP1 is installed OR SUSE Linux Enterprise High Performance Computing 15 SP1 is installed OR SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed OR SUSE Linux Enterprise Server 15 SP1 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed OR SUSE Linux Enterprise Storage 6 is installed OR SUSE Manager Proxy 4.0 is installed OR SUSE Manager Retail Branch Server 4.0 is installed OR SUSE Manager Server 4.0 is installed AND libnghttp2-14-1.40.0-3.6.3 is installed OR libnghttp2-14-32bit-1.40.0-3.6.3 is installed OR libnghttp2-devel-1.40.0-3.6.3 is installed OR libnghttp2_asio-devel-1.40.0-3.6.3 is installed OR libnghttp2_asio1-1.40.0-3.6.3 is installed Definition Synopsis Release Information SUSE Linux Enterprise Desktop 15 SP2 is installed OR SUSE Linux Enterprise High Performance Computing 15 SP2 is installed OR SUSE Linux Enterprise Module for Basesystem 15 SP2 is installed OR SUSE Linux Enterprise Server 15 SP2 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP2 is installed OR SUSE Linux Enterprise Storage 7 is installed OR SUSE Manager Proxy 4.1 is installed OR SUSE Manager Retail Branch Server 4.1 is installed OR SUSE Manager Server 4.1 is installed AND Package Information libnghttp2-14-1.40.0-1.15 is installed OR libnghttp2-14-32bit-1.40.0-1.15 is installed OR libnghttp2-devel-1.40.0-1.15 is installed OR libnghttp2_asio-devel-1.40.0-1.15 is installed OR libnghttp2_asio1-1.40.0-1.15 is installed Definition Synopsis Release Information SUSE Linux Enterprise Desktop 15 SP2 is installed OR SUSE Linux Enterprise High Performance Computing 15 SP2 is installed OR SUSE Linux Enterprise Module for Basesystem 15 SP2 is installed OR SUSE Linux Enterprise Server 15 SP2 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP2 is installed OR SUSE Linux Enterprise Storage 7 is installed OR SUSE Manager Proxy 4.1 is installed OR SUSE Manager Retail Branch Server 4.1 is installed OR SUSE Manager Server 4.1 is installed AND libnghttp2-14-1.40.0-1.15 is installed OR libnghttp2-14-32bit-1.40.0-1.15 is installed OR libnghttp2-devel-1.40.0-1.15 is installed OR libnghttp2_asio-devel-1.40.0-1.15 is installed OR libnghttp2_asio1-1.40.0-1.15 is installed OR Package Information SUSE Linux Enterprise Desktop 15 SP3 is installed OR SUSE Linux Enterprise High Performance Computing 15 SP3 is installed OR SUSE Linux Enterprise Module for Basesystem 15 SP3 is installed OR SUSE Linux Enterprise Server 15 SP3 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP3 is installed OR SUSE Linux Enterprise Storage 7.1 is installed OR SUSE Manager Proxy 4.2 is installed OR SUSE Manager Retail Branch Server 4.2 is installed OR SUSE Manager Server 4.2 is installed AND libnghttp2-14-1.40.0-3.5.1 is installed OR libnghttp2-14-32bit-1.40.0-3.5.1 is installed OR libnghttp2-devel-1.40.0-3.5.1 is installed OR libnghttp2_asio-devel-1.40.0-3.5.1 is installed OR libnghttp2_asio1-1.40.0-3.5.1 is installed Definition Synopsis openSUSE Leap 15.3 is installed AND Package Information libnghttp2-14-1.40.0-3.5.1 is installed AND libnghttp2-14 is signed with openSUSE key OR libnghttp2-14-32bit-1.40.0-3.5.1 is installed AND libnghttp2-14-32bit is signed with openSUSE key Definition Synopsis openSUSE Leap 15.4 is installed AND Package Information libnghttp2-14-1.40.0-6.1 is installed AND libnghttp2-14 is signed with openSUSE key OR libnghttp2-14-32bit-1.40.0-6.1 is installed AND libnghttp2-14-32bit is signed with openSUSE key Definition Synopsis Release Information SUSE Linux Enterprise Desktop 15 SP4 is installed OR SUSE Linux Enterprise High Performance Computing 15 SP4 is installed OR SUSE Linux Enterprise Module for Basesystem 15 SP4 is installed OR SUSE Linux Enterprise Server 15 SP4 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP4 is installed OR SUSE Manager Proxy 4.3 is installed OR SUSE Manager Retail Branch Server 4.3 is installed OR SUSE Manager Server 4.3 is installed AND Package Information libnghttp2-14-1.40.0-6.1 is installed OR libnghttp2-14-32bit-1.40.0-6.1 is installed OR libnghttp2-devel-1.40.0-6.1 is installed OR libnghttp2_asio-devel-1.40.0-6.1 is installed OR libnghttp2_asio1-1.40.0-6.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Desktop 15 SP5 is installed OR SUSE Linux Enterprise High Performance Computing 15 SP5 is installed OR SUSE Linux Enterprise Module for Basesystem 15 SP5 is installed OR SUSE Linux Enterprise Server 15 SP5 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP5 is installed AND Package Information libnghttp2-14-1.40.0-6.1 is installed OR libnghttp2-14-32bit-1.40.0-6.1 is installed OR libnghttp2-devel-1.40.0-6.1 is installed OR libnghttp2_asio-devel-1.40.0-6.1 is installed OR libnghttp2_asio1-1.40.0-6.1 is installed
BACK