CVE-2005-2024

Name	CVE-2005-2024
Description	Vipul Razor Agents (razor-agents) before 2.70 allows remote attackers to cause a denial of service via (1) certain "unusual HTML messages" or (2) "certain malformed headers" such as Content-Type.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub advisories/code/issues, web search, more)
References	DSA-738-1

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
razor (PTS)	buster, bullseye	1:2.85-4.2	fixed
	bookworm, sid	1:2.85-9	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin
razor	source	woody	(not affected)		DSA-738-1
razor	source	sarge	2.670-1sarge2	low	DSA-738-1
razor	source	(unstable)	2.720-1	low

varying and apparently innacurate info about what versions fix it