CVE:CVE-2018-1000164
CNNVD:CNNVD-201804-834
gunicorn是一款基于UNIX平台的Python WSGI HTTP服务器软件。
gunicorn 19.4.5版本中的nicorn/http/wsgi.py文件的‘process_headers’函数存在安全漏洞。攻击者可利用该漏洞造成服务器返回任意的HTTP包头。
solution:Upgrade gunicorn gunicorn to a higher version than 19.4.5,and avoid the version 19.4.5; Upgrade debian debian_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0