Vulnerability in Apache Kafka
CVE-2020-27218
In Eclipse Jetty version 9.4.0.RC0 to 9.4.34.v20201102, 10.0.0.alpha0 to 10.0.0.beta2, and 11.0.0.alpha0 to 11.0.0.beta2, if GZIP request body inflation is enabled and requests from different clients are multiplexed onto a single connection, and if an attacker can send a request with a body that is received entirely but not consumed by the application, then a subsequent request on the same connection will see that body prepended to its body. The attacker will not see any data but may inject data into the body of the subsequent request.
EPSS: 0.083 (94.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 4.8 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L.
Affected products
- Apache Kafka — versions 2.7.0
- Apache Spark — versions 2.4.8, 3.0.3
- Eclipse Jetty — versions 10.0.0, 11.0.0
- Netapp Oncommand_system_manager
- Netapp Snap_creator_framework
- Oracle Blockchain_platform
- Oracle Communications_converged_application_server_-_service_controller — versions 6.2
- Oracle Communications_offline_mediation_controller — versions 12.0.0.3.0
- Oracle Communications_pricing_design_center — versions 12.0.0.3.0
- Oracle Communications_services_gatekeeper — versions 7.0
Weakness classification (CWE)
Public proof-of-concept exploits
References
- emo@eclipse.org (Issue Tracking, Vendor Advisory)
- emo@eclipse.org (Third Party Advisory)
- emo@eclipse.org (mailing-list, Issue Tracking)
- emo@eclipse.org (mailing-list, Issue Tracking)
- emo@eclipse.org (mailing-list, Issue Tracking)
- emo@eclipse.org (mailing-list, Issue Tracking)
- emo@eclipse.org (mailing-list, Issue Tracking)
- emo@eclipse.org (mailing-list, Issue Tracking)
- emo@eclipse.org (mailing-list, Issue Tracking)
- emo@eclipse.org (mailing-list, Issue Tracking)
Frequently asked questions
- What is CVE-2020-27218?
- CVE-2020-27218 is a medium-severity vulnerability in Apache Kafka, classified under Sensitive Information in Resource Not Removed Before Reuse. CVSS score: 4.8/10. Published 2020-11-28.
- How severe is CVE-2020-27218?
- Medium severity. CVSS v3 base score is 4.8 out of 10.
- Is CVE-2020-27218 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.