What’s Vulnerable › Vulnerabilities

CVE-2016-8024

• Severity: high (CVSS 8.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 8.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2017-03-14 · updated 2026-06-17
• Weakness: CWE-113

Description

Improper neutralization of CRLF sequences in HTTP headers vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote unauthenticated attacker to obtain sensitive information via the server HTTP response spoofing.

Affected products

• Intel VirusScan Enterprise Linux (VSEL): through 2.0.3

References

• http://www.securityfocus.com/bid/94823
• http://www.securitytracker.com/id/1037433
• https://kc.mcafee.com/corporate/index?page=content&id=SB10181
• https://www.exploit-db.com/exploits/40911/
• http://www.securityfocus.com/bid/94823
• http://www.securitytracker.com/id/1037433
• https://kc.mcafee.com/corporate/index?page=content&id=SB10181
• https://www.exploit-db.com/exploits/40911/

Get alerted when CVE-2016-8024 or the next vulnerability affects your stack