Vulnerability in [Unknown] Undertow
CVE-2018-1067
In Undertow before versions 7.1.2.CR1, 7.1.2.GA it was found that the fix for CVE-2016-4993 was incomplete and Undertow web server is vulnerable to the injection of arbitrary HTTP headers, and also response splitting, due to insufficient sanitization and validation of user input before the input is used as part of an HTTP header value.
EPSS: 0.018 (75.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N.
Affected products
- [Unknown] Undertow — versions undertow 7.1.2.CR1, undertow 7.1.2.GA
- Redhat Enterprise_linux — versions 6.0, 7.0
- Redhat Jboss_enterprise_application_platform — versions 7.1
- Redhat Undertow
- Redhat Virtualization_host — versions 4.0
Weakness classification (CWE)
Public proof-of-concept exploits
References
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Vendor Advisory)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Vendor Advisory)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Vendor Advisory)
- secalert@redhat.com (x_refsource_CONFIRM, Issue Tracking, Vendor Advisory)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Vendor Advisory)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Vendor Advisory)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Vendor Advisory)
Frequently asked questions
- What is CVE-2018-1067?
- CVE-2018-1067 is a medium-severity vulnerability in [Unknown] Undertow, classified under HTTP Response Splitting. CVSS score: 6.1/10. Published 2018-05-21.
- How severe is CVE-2018-1067?
- Medium severity. CVSS v3 base score is 6.1 out of 10.
- Is CVE-2018-1067 known to be exploited?
- 3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.