Skip to content

Proxy Error on U+2013 EN DASH instead of ASCII dash in CVE-ID.

Copying the CVE-ID from https://ctrlalt.medium.com/space-attack-spoofing-eids-password-authenticated-connection-establishment-11561e5657b1 (CVE-2024–23674) and pasting it into security-tracker's search form results in this error message:

Proxy Error

The proxy server received an invalid response from an upstream server.
The proxy server could not handle the request

Reason: Error reading from remote server

Reason seems that the second dash in the CVE-ID in this article is a "U+2013 EN DASH" instead of an ASCII dash:

https://security-tracker.debian.org/tracker/?query=CVE-2024%E2%80%9323674

(Please note the %E2%80%93 instead of the second dash after "2024".)

Sounds as if the backend doesn't return a proper HTTP response with headers but instead an exception without HTTP headers which the proxy hence can't parse.