CVE-2019-17420

CVE-2019-17420 describes a parsing error in OISF LibHTP, specifically versions prior to 0.5.31, which is used by Suricata 4.1.4 and other products. This flaw prevents the http_header signature from triggering an alert when encountering an HTTP response ending with a single carriage return and newline (\r\n). The vulnerability is rated Medium (CVSS 5.3) with a low attack complexity and no user interaction required. It primarily impacts integrity (I:L), as it allows malicious HTTP responses to bypass detection, but does not directly affect confidentiality or availability. There is no evidence of active exploitation, nor is public exploit code available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, indicating a low level of public attention.