https://bugzilla.redhat.com/show_bug.cgi?id=1550671
Chess Hazlett <chazlett(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Group|security, qe_staff |
CC| |alee(a)redhat.com,
| |ccoleman(a)redhat.com,
| |dchen(a)redhat.com,
| |dedgar(a)redhat.com,
| |dmcphers(a)redhat.com,
| |hghasemb(a)redhat.com,
| |ivan.afonichev(a)gmail.com,
| |java-sig-commits(a)lists.fedo
| |raproject.org,
| |jgoulding(a)redhat.com,
| |krathod(a)redhat.com,
| |krzysztof.daniel(a)gmail.com,
| |lef(a)fedoraproject.org,
| |me(a)coolsvap.net,
| |mgoldman(a)redhat.com,
| |puntogil(a)libero.it,
| |rhel8-maint(a)redhat.com,
| |sbonazzo(a)redhat.com
Summary|EMBARGOED CVE-2018-1067 |CVE-2018-1067 undertow:
|undertow: HTTP header |HTTP header injection using
|injection using CRLF with |CRLF with UTF-8 Encoding
|UTF-8 Encoding (incomplete |(incomplete fix of
|fix of CVE-2016-4993) |CVE-2016-4993)
Whiteboard|impact=moderate,public=2018 |impact=moderate,public=2018
|0424,reported=20180301,sour |0425:1751,reported=20180301
|ce=researcher,cvss2=5.8/AV: |,source=researcher,cvss2=5.
|N/AC:M/Au:N/C:P/I:P/A:N,cvs |8/AV:N/AC:M/Au:N/C:P/I:P/A:
|s3=5.4/CVSS:3.0/AV:N/AC:L/P |N,cvss3=5.4/CVSS:3.0/AV:N/A
|R:N/UI:R/S:U/C:L/I:L/A:N,cw |C:L/PR:N/UI:R/S:U/C:L/I:L/A
|e=CWE-113,fedora-all/wildfl |:N,cwe=CWE-113,fedora-all/w
|y=affected,eap-6/jbossweb=n |ildfly=affected,eap-6/jboss
|ew,eap-7/undertow=affected, |web=new,eap-7/undertow=affe
|openshift-1/jbossweb=affect |cted,openshift-1/jbossweb=a
|ed,rhel-6/tomcat6=notaffect |ffected,rhel-6/tomcat6=nota
|ed,rhel-7/tomcat=notaffecte |ffected,rhel-7/tomcat=notaf
|d,jbews-2/tomcat7=new,jbews |fected,jbews-2/tomcat7=new,
|-2/tomcat6=new,eap-7/wildfl |jbews-2/tomcat6=new,eap-7/w
|y=new,jdg-7/wildfly=new,rhe |ildfly=new,jdg-7/wildfly=ne
|l-8/wildfly-core=new,rhev-m |w,rhel-8/wildfly-core=new,r
|-4/eap7-wildfly=new,rhsso-7 |hev-m-4/eap7-wildfly=new,rh
|/wildfly=new,jdg-6/jbossweb |sso-7/wildfly=new,jdg-6/jbo
|=new,eap-5/jbossweb=new,brm |ssweb=new,eap-5/jbossweb=ne
|s-5/jbossweb=new,soap-5/jbo |w,brms-5/jbossweb=new,soap-
|ssweb=new,fsw-6/jbossweb=ne |5/jbossweb=new,fsw-6/jbossw
|w,fuse-6/jbossweb=new,fedor |eb=new,fuse-6/jbossweb=new,
|a-all/tomcat=affected,epel- |fedora-all/tomcat=affected,
|6/tomcat=new,rhel-5/tomcat5 |epel-6/tomcat=new,rhel-5/to
|=notaffected,rhel-8/tomcat= |mcat5=notaffected,rhel-8/to
|notaffected,rhscl-3/rh-java |mcat=notaffected,rhscl-3/rh
|-common-tomcat=notaffected, |-java-common-tomcat=notaffe
|swarm-7/undertow=new,fedora |cted,swarm-7/undertow=new,f
|-all/undertow=new,rhev-m-4/ |edora-all/undertow=new,rhev
|eap7-undertow=new,rhel-8/un |-m-4/eap7-undertow=new,rhel
|dertow=new |-8/undertow=new
--
You are receiving this mail because:
You are on the CC list for the bug.