https://zeddyu.github.io/%E5%85%B3%E4%BA%8E/

1<!doctype html><html lang=zh-CN dir=ltr><head><meta charset=utf-8><meta name=viewport content='width=device-width,initial-scale=1'><meta name=description content="Some useless but interesting CVE IDs that I found."><title>关于</title><link rel=canonical href=https://zeddyu.github.io/%E5%85%B3%E4%BA%8E/><link rel=stylesheet href=https://cdn.zedy.club/gh/zeddyu/zeddyu.github.io/scss/style.min.04c89b26eab2af719cf2309935e338bdd46037dbcf1722d65b01ca706fb3a6ec.css integrity="sha256-BMibJuqyr3Gc8jCZNeM4vdRgN9vPFyLWWwHKcG+zpuw=" crossorigin=anonymous><meta property='og:title' content="关于"><meta property='og:description' content="Some useless but interesting CVE IDs that I found."><meta property='og:url' content='https://zeddyu.github.io/%E5%85%B3%E4%BA%8E/'><meta property='og:site_name' content="Zeddy's Blog"><meta property='og:type' content='article'><meta property='article:section' content='Page'><meta property='article:published_time' content='2024-12-30T00:00:00+00:00'><meta property='article:modified_time' content='2024-12-30T00:00:00+00:00'><meta name=twitter:title content="关于"><meta name=twitter:description content="Some useless but interesting CVE IDs that I found."><link rel="shortcut icon" href=/favicon.ico>

1<script async src="https://www.googletagmanager.com/gtag/js?id=

1G-PDESKL57LT

1"></script>

1<script>var doNotTrack=!1,dnt=navigator.doNotTrack||window.doNotTrack||navigator.msDoNotTrack,doNotTrack=dnt=="1"||dnt=="yes";if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-PDESKL57LT")}</script>

1</head><body class=article-page>

1<script>(function(){const e="StackColorScheme";localStorage.getItem(e)||localStorage.setItem(e,"auto")})()</script>

1<script>(function(){const t="StackColorScheme",e=localStorage.getItem(t),n=window.matchMedia("(prefers-color-scheme: dark)").matches===!0;e=="dark"||e==="auto"&&n?document.documentElement.dataset.scheme="dark":document.documentElement.dataset.scheme="light"})()</script>

1<div class="container main-container flex on-phone--column extended"><aside class="sidebar left-sidebar sticky compact"><button class="hamburger hamburger--spin" type=button id=toggle-menu aria-label=切换菜单>
2<span class=hamburger-box><span class=hamburger-inner></span></span></button><header><figure class=site-avatar><a href=/><img src=https://cdn.zedy.club/gh/zeddyu/zeddyu.github.io/img/avatar.webp width=150 height=150 class=site-logo loading=lazy alt=Avatar></a></figure><div class=site-meta><h1 class=site-name><a href=/>Zeddy's Blog</a></h1><h2 class=site-description></h2></div></header><ol class=menu-social><li><a href=https://github.com/ZeddYu title=GitHub rel=me><svg class="icon icon-tabler icon-tabler-brand-github" width="24" height="24" viewBox="0 0 24 24" stroke-width="2" stroke="currentColor" fill="none" stroke-linecap="round" stroke-linejoin="round"><path stroke="none" d="M0 0h24v24H0z" fill="none"/><path d="M9 19c-4.3 1.4-4.3-2.5-6-3m12 5v-3.5c0-1 .1-1.4-.5-2 2.8-.3 5.5-1.4 5.5-6a4.6 4.6.0 00-1.3-3.2 4.2 4.2.0 00-.1-3.2s-1.1-.3-3.5 1.3a12.3 12.3.0 00-6.2.0C6.5 2.8 5.4 3.1 5.4 3.1a4.2 4.2.0 00-.1 3.2A4.6 4.6.0 004 9.5c0 4.6 2.7 5.7 5.5 6-.6.6-.6 1.2-.5 2V21"/></svg></a></li><li><a href=https://zeddyu.github.io/atom.xml title=Rss rel=me><svg class="icon icon-tabler icon-tabler-rss" width="24" height="24" viewBox="0 0 24 24" stroke-width="2" stroke="currentColor" fill="none" stroke-linecap="round" stroke-linejoin="round"><path stroke="none" d="M0 0h24v24H0z"/><circle cx="5" cy="19" r="1"/><path d="M4 4a16 16 0 0116 16"/><path d="M4 11a9 9 0 019 9"/></svg></a></li><li><a href=https://x.com/ZeddYu_Lu title=Twitter rel=me><svg class="icon icon-tabler icon-tabler-brand-twitter" width="24" height="24" viewBox="0 0 24 24" stroke-width="2" stroke="currentColor" fill="none" stroke-linecap="round" stroke-linejoin="round"><path stroke="none" d="M0 0h24v24H0z" fill="none"/><path d="M22 4.01c-1 .49-1.98.689-3 .99-1.121-1.265-2.783-1.335-4.38-.737S11.977 6.323 12 8v1c-3.245.083-6.135-1.395-8-4 0 0-4.182 7.433 4 11-1.872 1.247-3.739 2.088-6 2 3.308 1.803 6.913 2.423 10.034 1.517 3.58-1.04 6.522-3.723 7.651-7.742a13.84 13.84.0 00.497-3.753C20.18 7.773 21.692 5.25 22 4.009z"/></svg></a></li></ol><ol class=menu id=main-menu><li><a href=/><svg class="icon icon-tabler icon-tabler-home" width="24" height="24" viewBox="0 0 24 24" stroke-width="2" stroke="currentColor" fill="none" stroke-linecap="round" stroke-linejoin="round"><path stroke="none" d="M0 0h24v24H0z"/><polyline points="5 12 3 12 12 3 21 12 19 12"/><path d="M5 12v7a2 2 0 002 2h10a2 2 0 002-2v-7"/><path d="M9 21v-6a2 2 0 012-2h2a2 2 0 012 2v6"/></svg>
3<span>首页</span></a></li><li class=current><a href=/%E5%85%B3%E4%BA%8E/><svg class="icon icon-tabler icon-tabler-user" width="24" height="24" viewBox="0 0 24 24" stroke-width="2" stroke="currentColor" fill="none" stroke-linecap="round" stroke-linejoin="round"><path stroke="none" d="M0 0h24v24H0z"/><circle cx="12" cy="7" r="4"/><path d="M6 21v-2a4 4 0 014-4h4a4 4 0 014 4v2"/></svg>
4<span>关于</span></a></li><li><a href=/archives/><svg class="icon icon-tabler icon-tabler-archive" width="24" height="24" viewBox="0 0 24 24" stroke-width="2" stroke="currentColor" fill="none" stroke-linecap="round" stroke-linejoin="round"><path stroke="none" d="M0 0h24v24H0z"/><rect x="3" y="4" width="18" height="4" rx="2"/><path d="M5 8v10a2 2 0 002 2h10a2 2 0 002-2V8"/><line x1="10" y1="12" x2="14" y2="12"/></svg>
5<span>归档</span></a></li><li><a href=/%E5%8F%8B%E9%93%BE/><svg class="icon icon-tabler icon-tabler-link" width="24" height="24" viewBox="0 0 24 24" stroke-width="2" stroke="currentColor" fill="none" stroke-linecap="round" stroke-linejoin="round"><path stroke="none" d="M0 0h24v24H0z"/><path d="M10 14a3.5 3.5.0 005 0l4-4a3.5 3.5.0 00-5-5l-.5.5"/><path d="M14 10a3.5 3.5.0 00-5 0l-4 4a3.5 3.5.0 005 5l.5-.5"/></svg>
6<span>友链</span></a></li><li><a href=/ads/><svg class="icon icon-tabler icon-tabler-ad" width="44" height="44" viewBox="0 0 24 24" stroke-width="1.5" stroke="currentColor" fill="none" stroke-linecap="round" stroke-linejoin="round"><path stroke="none" d="M0 0h24v24H0z" fill="none"/><rect x="3" y="5" width="18" height="14" rx="2"/><path d="M7 15v-4a2 2 0 014 0v4"/>

6<line x1="7" y1="13" x2="11" y2="13"/><path d="M17 9v6h-1.5a1.5 1.5.0 111.5-1.5"/></svg>
7<span>广告</span></a></li><li><a href=/search/><svg class="icon icon-tabler icon-tabler-search" width="24" height="24" viewBox="0 0 24 24" stroke-width="2" stroke="currentColor" fill="none" stroke-linecap="round" stroke-linejoin="round"><path stroke="none" d="M0 0h24v24H0z"/><circle cx="10" cy="10" r="7"/><line x1="21" y1="21" x2="15" y2="15"/></svg>
8<span>搜索</span></a></li><li class=menu-bottom-section><ol class=menu><li id=i18n-switch><svg class="icon icon-tabler icon-tabler-language" width="24" height="24" viewBox="0 0 24 24" stroke-width="2" stroke="currentColor" fill="none" stroke-linecap="round" stroke-linejoin="round"><path stroke="none" d="M0 0h24v24H0z" fill="none"/><path d="M4 5h7"/><path d="M9 3v2c0 4.418-2.239 8-5 8"/><path d="M5 9c-.003 2.144 2.952 3.908 6.7 4"/><path d="M12 20l4-9 4 9"/><path d="M19.1 18h-6.2"/></svg>
9<span class=lang-pair><span class="lang-item active">中文</span><span class=lang-sep>/</span><a href=/en/about/ class=lang-item>EN</a></span></li><li id=dark-mode-toggle><svg class="icon icon-tabler icon-tabler-toggle-left" width="24" height="24" viewBox="0 0 24 24" stroke-width="2" stroke="currentColor" fill="none" stroke-linecap="round" stroke-linejoin="round"><path stroke="none" d="M0 0h24v24H0z"/><circle cx="8" cy="12" r="2"/><rect x="2" y="6" width="20" height="12" rx="6"/></svg>
10<svg class="icon icon-tabler icon-tabler-toggle-right" width="24" height="24" viewBox="0 0 24 24" stroke-width="2" stroke="currentColor" fill="none" stroke-linecap="round" stroke-linejoin="round"><path stroke="none" d="M0 0h24v24H0z"/><circle cx="16" cy="12" r="2"/><rect x="2" y="6" width="20" height="12" rx="6"/></svg>
11<span>暗色模式</span></li></ol></li></ol></aside><main class="main full-width"><article class=main-article><header class=article-header><div class=article-details><div class=article-title-wrapper><h2 class=article-title><a href=/%E5%85%B3%E4%BA%8E/>关于</a></h2><h3 class=article-subtitle>Some useless but interesting CVE IDs that I found.</h3></div><footer class=article-meta><div class=article-meta-row><div class=inline-meta><svg class="icon icon-tabler icon-tabler-calendar-time" width="56" height="56" viewBox="0 0 24 24" stroke-width="2" stroke="currentColor" fill="none" stroke-linecap="round" stroke-linejoin="round"><path stroke="none" d="M0 0h24v24H0z"/><path d="M11.795 21H5a2 2 0 01-2-2V7a2 2 0 012-2h12a2 2 0 012 2v4"/><circle cx="18" cy="18" r="4"/><path d="M15 3v4"/><path d="M7 3v4"/><path d="M3 11h16"/><path d="M18 16.496V18l1 1"/></svg>
12<time class=article-time--published datetime=2024-12-30T00:00:00Z>12月 30, 2024</time>
13<svg class="icon icon-tabler icon-tabler-clock" width="24" height="24" viewBox="0 0 24 24" stroke-width="2" stroke="currentColor" fill="none" stroke-linecap="round" stroke-linejoin="round"><path stroke="none" d="M0 0h24v24H0z"/><circle cx="12" cy="12" r="9"/><polyline points="12 7 12 12 15 15"/></svg>
14<time class=article-time--reading>阅读时长: 1 分钟</time></div></div><div class=inline-meta><svg class="icon icon-tabler icon-tabler-language" width="24" height="24" viewBox="0 0 24 24" stroke-width="2" stroke="currentColor" fill="none" stroke-linecap="round" stroke-linejoin="round"><path stroke="none" d="M0 0h24v24H0z" fill="none"/><path d="M4 5h7"/><path d="M9 3v2c0 4.418-2.239 8-5 8"/><path d="M5 9c-.003 2.144 2.952 3.908 6.7 4"/><path d="M12 20l4-9 4 9"/><path d="M19.1 18h-6.2"/></svg>
15<a href=/en/about/ class=link>English</a></div></footer></div></header><section class=article-content><p>Some useless but interesting CVE IDs that I found.</p><div class=table-wrapper><table><thead><tr><th>Name</th><th>CVE ID</th></tr></thead><tbody><tr><td>Apache Commons Net</td><td>CVE-2021-37533</td></tr><tr><td>Apache HTTP Server</td><td>CVE-2022-36760</td></tr><tr><td>Apache Tomcat</td><td>CVE-2019-17569/CVE-2020-1935</td></tr><tr><td>Apache Traffic Server</td><td>CVE-2020-1944</td></tr><tr><td>Ktor</td><td>CVE-2020-26129/CVE-2021-25762</td></tr><tr><td>Hyper</td><td>CVE-2021-21299</td></tr><tr><td>Inetutils</td><td>CVE-2021-40491</td></tr><tr><td>Microsoft IIS Server</td><td>CVE-2020-0645</td></tr><tr><td>Mysqljs</td><td>CVE-2019-14939(Actually Not)</td></tr><tr><td>Netty</td><td>CVE-2019-20444/CVE-2019-20445</td></tr><tr><td>Oracle Weblogic Server</td><td>CVE-2020-2867/CVE-2020-14588/CVE-2020-14589</td></tr><tr><td>Puma</td><td>CVE-2020-11076/CVE-2020-11077</td></tr><tr><td>Red Hat undertow</td><td>CVE-2020-10719</td></tr><tr><td>Twisted</td><td>CVE-2020-10108/CVE-2020-10109</td></tr><tr><td>Waitress</td><td>CVE-2019-16789</td></tr></tbody></table></div><p>Publications:</p><ul><li><a class=link href=https://shenkaiwen.com/publication/2022-hdiff/ target=_blank rel=noopener>HDiff: A Semi-automatic Framework for Discovering Semantic Gap Attack in HTTP Implementations</a>. In <a class=link href=https://dsn2022.github.io/ target=_blank rel=noopener><em>DSN</em></a>, Best Paper Runner-Up, 2022.</li><li><a class=link href=https://lixiang521.com/publication/sigmetrics23/ target=_blank rel=noopener>DareShark: Detecting and Measuring Security Risks of Hosting-Based Dangling Domains</a>. In <a class=link href=https://www.sigmetrics.org/sigmetrics2023/ target=_blank rel=noopener><em>2023 ACM SIGMETRICS</em></a>. 2023.</li><li>Finding and Exploiting Discrepancies in QR Code Payload Processing. In <a class=link href=https://www.sigsac.org/ccs/CCS2026/program/accepted-papers.html target=_blank rel=noopener><em>2026 CCS</em></a>. 2026.</li></ul><p>Contact:</p><ul><li>Mail: <code>echo emVkZHl1Lmx1QGdtYWlsLmNvbQ== | base64 --decode</code></li><li>Follow me on twitter: <a class=link href=https://twitter.com/ZeddYu_Lu target=_blank rel=noopener>Zeddy</a></li></ul></section><footer class="article-meta article-footer"><section class="article-copyright inline-meta"><svg class="icon icon-tabler icon-tabler-copyright" width="24" height="24" viewBox="0 0 24 24" stroke-width="2" stroke="currentColor" fill="none" stroke-linecap="round" stroke-linejoin="round"><path stroke="none" d="M0 0h24v24H0z"/><circle cx="12" cy="12" r="9"/><path d="M14.5 9a3.5 4 0 100 6"/></svg>
16<span>CC BY-NC-ND</span></section></footer></article><footer class=site-footer><section class=copyright>&copy;
172020 -
182026 Zeddy's Blog</section><section class=powerby>使用 <a href=https://gohugo.io/ target=_blank rel=noopener>Hugo</a> 构建<br>主题 <b><a href=https://github.com/CaiJimmy/hugo-theme-stack target=_blank rel=noopener data-version=4.0.3>Stack</a></b> 由 <a href=https://jimmycai.com target=_blank rel=noopener>Jimmy</a> 设计</section></footer>

18<script type=module>
19    import gallery from 'https:\/\/cdn.zedy.club\/gh\/zeddyu\/zeddyu.github.io\/ts\/gallery.js';
20
21    const articleContent = document.querySelector('.article-content');
22    const shouldLoad = articleContent && (articleContent.querySelectorAll('figure').length > 0 || articleContent.querySelectorAll('img.gallery-image').length > 0);
23    
24    if (shouldLoad) {
25        gallery(articleContent);
26
27        const PhotoSwipeLightbox = (await import("https:\/\/cdn.zedy.club\/npm\/[email protected]\/dist\/photoswipe-lightbox.esm.min.js")).default;
28        const styleHref = "https:\/\/cdn.zedy.club\/npm\/[email protected]\/dist\/photoswipe.css";
29
30        const styleTag = document.createElement('link');
31        styleTag.rel = 'stylesheet';
32        styleTag.href = styleHref;
33        document.head.appendChild(styleTag);
34
35        const lightbox = new PhotoSwipeLightbox({
36            gallerySelector: '.article-content',
37            childSelector: 'figure a.image-link',
38            pswpModule: () => import("https:\/\/cdn.zedy.club\/npm\/[email protected]\/dist\/photoswipe.esm.min.js")
39        });
40        lightbox.init();
41    }
42</script>

42</main></div>

42<script type=text/javascript src=https://cdn.zedy.club/gh/zeddyu/zeddyu.github.io/ts/main.f856840516f7c2ad1769a8f5937e3d08d6cb386e2cd2dd025ae696e0ff207958.js integrity="sha256-+FaEBRb3wq0Xaaj1k349CNbLOG4s0t0CWuaW4P8geVg=" crossorigin=anonymous defer></script>

42<script>"serviceWorker"in navigator&&window.addEventListener("load",function(){navigator.serviceWorker.register("/sw.min.js",{scope:"/"}).catch(function(e){console.error("Service worker registration failed",e)})})</script>

42</body></html>