[Bug 1550671] CVE-2018-1067 undertow: HTTP header injection using CRLF with UTF-8 Encoding ( incomplete fix of CVE-2016-4993)
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1550671
Pavel Polischouk <pavelp(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=moderate,public=2018 |impact=moderate,public=2018
|0425:1751,reported=20180301 |0425:1751,reported=20180301
|,source=researcher,cvss2=5. |,source=researcher,cvss2=5.
|8/AV:N/AC:M/Au:N/C:P/I:P/A: |8/AV:N/AC:M/Au:N/C:P/I:P/A:
|N,cvss3=5.4/CVSS:3.0/AV:N/A |N,cvss3=5.4/CVSS:3.0/AV:N/A
|C:L/PR:N/UI:R/S:U/C:L/I:L/A |C:L/PR:N/UI:R/S:U/C:L/I:L/A
|:N,cwe=CWE-113,fedora-all/w |:N,cwe=CWE-113,fedora-all/w
|ildfly=affected,eap-6/jboss |ildfly=affected,eap-6/jboss
|web=new,eap-7/undertow=affe |web=new,eap-7/undertow=affe
|cted,openshift-1/jbossweb=a |cted,openshift-1/jbossweb=a
|ffected,rhel-6/tomcat6=nota |ffected,rhel-6/tomcat6=nota
|ffected,rhel-7/tomcat=notaf |ffected,rhel-7/tomcat=notaf
|fected,jbews-2/tomcat7=new, |fected,jbews-2/tomcat7=new,
|jbews-2/tomcat6=new,eap-7/w |jbews-2/tomcat6=new,eap-7/w
|ildfly=new,jdg-7/wildfly=ne |ildfly=new,jdg-7/wildfly=ne
|w,rhel-8/wildfly-core=new,r |w,rhel-8/wildfly-core=new,r
|hev-m-4/eap7-wildfly=new,rh |hev-m-4/eap7-wildfly=new,rh
|sso-7/wildfly=new,jdg-6/jbo |sso-7/wildfly=new,jdg-6/jbo
|ssweb=new,eap-5/jbossweb=ne |ssweb=new,eap-5/jbossweb=ne
|w,brms-5/jbossweb=new,soap- |w,brms-5/jbossweb=wontfix,s
|5/jbossweb=new,fsw-6/jbossw |oap-5/jbossweb=wontfix,fsw-
|eb=new,fuse-6/jbossweb=new, |6/jbossweb=wontfix,fuse-6/j
|fedora-all/tomcat=affected, |bossweb=new,fedora-all/tomc
|epel-6/tomcat=new,rhel-5/to |at=affected,epel-6/tomcat=n
|mcat5=notaffected,rhel-8/to |ew,rhel-5/tomcat5=notaffect
|mcat=notaffected,rhscl-3/rh |ed,rhel-8/tomcat=notaffecte
|-java-common-tomcat=notaffe |d,rhscl-3/rh-java-common-to
|cted,swarm-7/undertow=new,f |mcat=notaffected,swarm-7/un
|edora-all/undertow=new,rhev |dertow=new,fedora-all/under
|-m-4/eap7-undertow=new,rhel |tow=new,rhev-m-4/eap7-under
|-8/undertow=new |tow=new,rhel-8/undertow=new
--
You are receiving this mail because:
You are on the CC list for the bug.
6 years, 1 month
[Bug 1550671] CVE-2018-1067 undertow: HTTP header injection using CRLF with UTF-8 Encoding ( incomplete fix of CVE-2016-4993)
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1550671
Chess Hazlett <chazlett(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Group|security, qe_staff |
CC| |alee(a)redhat.com,
| |ccoleman(a)redhat.com,
| |dchen(a)redhat.com,
| |dedgar(a)redhat.com,
| |dmcphers(a)redhat.com,
| |hghasemb(a)redhat.com,
| |ivan.afonichev(a)gmail.com,
| |java-sig-commits(a)lists.fedo
| |raproject.org,
| |jgoulding(a)redhat.com,
| |krathod(a)redhat.com,
| |krzysztof.daniel(a)gmail.com,
| |lef(a)fedoraproject.org,
| |me(a)coolsvap.net,
| |mgoldman(a)redhat.com,
| |puntogil(a)libero.it,
| |rhel8-maint(a)redhat.com,
| |sbonazzo(a)redhat.com
Summary|EMBARGOED CVE-2018-1067 |CVE-2018-1067 undertow:
|undertow: HTTP header |HTTP header injection using
|injection using CRLF with |CRLF with UTF-8 Encoding
|UTF-8 Encoding (incomplete |(incomplete fix of
|fix of CVE-2016-4993) |CVE-2016-4993)
Whiteboard|impact=moderate,public=2018 |impact=moderate,public=2018
|0424,reported=20180301,sour |0425:1751,reported=20180301
|ce=researcher,cvss2=5.8/AV: |,source=researcher,cvss2=5.
|N/AC:M/Au:N/C:P/I:P/A:N,cvs |8/AV:N/AC:M/Au:N/C:P/I:P/A:
|s3=5.4/CVSS:3.0/AV:N/AC:L/P |N,cvss3=5.4/CVSS:3.0/AV:N/A
|R:N/UI:R/S:U/C:L/I:L/A:N,cw |C:L/PR:N/UI:R/S:U/C:L/I:L/A
|e=CWE-113,fedora-all/wildfl |:N,cwe=CWE-113,fedora-all/w
|y=affected,eap-6/jbossweb=n |ildfly=affected,eap-6/jboss
|ew,eap-7/undertow=affected, |web=new,eap-7/undertow=affe
|openshift-1/jbossweb=affect |cted,openshift-1/jbossweb=a
|ed,rhel-6/tomcat6=notaffect |ffected,rhel-6/tomcat6=nota
|ed,rhel-7/tomcat=notaffecte |ffected,rhel-7/tomcat=notaf
|d,jbews-2/tomcat7=new,jbews |fected,jbews-2/tomcat7=new,
|-2/tomcat6=new,eap-7/wildfl |jbews-2/tomcat6=new,eap-7/w
|y=new,jdg-7/wildfly=new,rhe |ildfly=new,jdg-7/wildfly=ne
|l-8/wildfly-core=new,rhev-m |w,rhel-8/wildfly-core=new,r
|-4/eap7-wildfly=new,rhsso-7 |hev-m-4/eap7-wildfly=new,rh
|/wildfly=new,jdg-6/jbossweb |sso-7/wildfly=new,jdg-6/jbo
|=new,eap-5/jbossweb=new,brm |ssweb=new,eap-5/jbossweb=ne
|s-5/jbossweb=new,soap-5/jbo |w,brms-5/jbossweb=new,soap-
|ssweb=new,fsw-6/jbossweb=ne |5/jbossweb=new,fsw-6/jbossw
|w,fuse-6/jbossweb=new,fedor |eb=new,fuse-6/jbossweb=new,
|a-all/tomcat=affected,epel- |fedora-all/tomcat=affected,
|6/tomcat=new,rhel-5/tomcat5 |epel-6/tomcat=new,rhel-5/to
|=notaffected,rhel-8/tomcat= |mcat5=notaffected,rhel-8/to
|notaffected,rhscl-3/rh-java |mcat=notaffected,rhscl-3/rh
|-common-tomcat=notaffected, |-java-common-tomcat=notaffe
|swarm-7/undertow=new,fedora |cted,swarm-7/undertow=new,f
|-all/undertow=new,rhev-m-4/ |edora-all/undertow=new,rhev
|eap7-undertow=new,rhel-8/un |-m-4/eap7-undertow=new,rhel
|dertow=new |-8/undertow=new
--
You are receiving this mail because:
You are on the CC list for the bug.
6 years, 1 month