Skip to content
OpenAdvisories
Medium · 5.4 CVE-2018-1067 EUVD-2022-2327GHSA-47mp-rq2x-wjf2

Improper Neutralization of CRLF Sequences in HTTP Headers in Undertow

Published May 21, 2018 · Updated Aug 5, 2024 · Assigned by redhat

Vendor: [UNKNOWN] Product: undertow Package: org.jboss.eap:wildfly-undertow Package: undertow Package: undertow Ecosystem: Debian Ecosystem: Maven Ecosystem: Ubuntu

Description

In Undertow before versions 7.1.2.CR1, 7.1.2.GA it was found that the fix for CVE-2016-4993 was incomplete and Undertow web server is vulnerable to the injection of arbitrary HTTP headers, and also response splitting, due to insufficient sanitization and validation of user input before the input is used as part of an HTTP header value.

Affected products

VendorProductAffectedFixed
[UNKNOWN] undertow undertow 7.1.2.CR1, undertow 7.1.2.GA —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 undertow 1.4.25-1 —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu Pro 24.04 LTS undertow No fix yet —
Ubuntu Pro 18.04 LTS undertow No fix yet —
Ubuntu Pro 16.04 LTS undertow No fix yet —

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 7 rhvm-appliance 2:4.2-20180828.0.el7 RHSA-2018:2643
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat JBoss EAP 7 eap7-activemq-artemis +15 1.5.5.010-1.redhat_1.1.ep7.el6 RHSA-2018:1248, RHSA-2018:1247
Red Hat JBoss EAP 7 eap7-hibernate +5 5.1.13-1.Final_redhat_1.1.ep7.el6 RHSA-2018:1248, RHSA-2018:1247
Red Hat JBoss EAP 7 eap7-infinispan +5 8.2.10-1.Final_redhat_1.1.ep7.el6 RHSA-2018:1248, RHSA-2018:1247
Red Hat JBoss EAP 7 eap7-ironjacamar +8 1.4.8-1.Final_redhat_1.1.ep7.el6 RHSA-2018:1248, RHSA-2018:1247
Red Hat JBoss EAP 7 eap7-jboss-ec2-eap +1 7.1.2-1.GA_redhat_1.ep7.el6 RHSA-2018:1249
Red Hat JBoss EAP 7 eap7-jboss-ejb-client 4.0.10-1.Final_redhat_1.1.ep7.el6 RHSA-2018:1248, RHSA-2018:1247
Red Hat JBoss EAP 7 eap7-jboss-jsf-api_2.2_spec 2.2.13-5.SP2_redhat_1.1.ep7.el6 RHSA-2018:1248, RHSA-2018:1247
Red Hat JBoss EAP 7 eap7-jboss-marshalling +1 2.0.4-1.Final_redhat_1.1.ep7.el6 RHSA-2018:1248, RHSA-2018:1247
Red Hat JBoss EAP 7 eap7-jboss-server-migration +18 1.0.4-1.Final_redhat_1.1.ep7.el6 RHSA-2018:1248, RHSA-2018:1247
Red Hat JBoss EAP 7 eap7-jboss-weld-2.2-api 2.4.0-3.SP2_redhat_1.1.ep7.el6 RHSA-2018:1248, RHSA-2018:1247
Red Hat JBoss EAP 7 eap7-jboss-xnio-base 3.5.5-1.Final_redhat_1.1.ep7.el6 RHSA-2018:1248, RHSA-2018:1247
Red Hat JBoss EAP 7 eap7-jgroups 3.6.14-1.Final_redhat_1.1.ep7.el6 RHSA-2018:1248, RHSA-2018:1247
Red Hat JBoss EAP 7 eap7-mod_cluster 1.3.9-1.Final_redhat_1.1.ep7.el6 RHSA-2018:1248, RHSA-2018:1247
Red Hat JBoss EAP 7 eap7-picketbox +1 5.0.3-1.Final_redhat_1.1.ep7.el6 RHSA-2018:1248, RHSA-2018:1247
Red Hat JBoss EAP 7 eap7-picketlink-api +9 2.5.5-11.SP10_redhat_1.1.ep7.el6 RHSA-2018:1248, RHSA-2018:1247
Red Hat JBoss EAP 7 eap7-undertow 1.4.18-5.SP5_redhat_1.1.ep7.el6 RHSA-2018:1248, RHSA-2018:1247
Red Hat JBoss EAP 7 eap7-weld-core +3 2.4.7-1.Final_redhat_1.1.ep7.el6 RHSA-2018:1248, RHSA-2018:1247
Red Hat JBoss EAP 7 eap7-wildfly +2 7.1.2-1.GA_redhat_1.1.ep7.el6 RHSA-2018:1248, RHSA-2018:1247
Red Hat JBoss EAP 7 eap7-wildfly-elytron 1.1.9-1.Final_redhat_1.1.ep7.el6 RHSA-2018:1248, RHSA-2018:1247
Red Hat JBoss EAP 7 eap7-wildfly-elytron-tool 1.0.6-1.Final_redhat_1.1.ep7.el6 RHSA-2018:1248, RHSA-2018:1247
Red Hat JBoss EAP 7 eap7-wildfly-web-console-eap 2.9.16-2.Final_redhat_1.2.ep7.el6 RHSA-2018:1248, RHSA-2018:1247

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.jboss.eap:wildfly-undertow < 7.1.2.GA 7.1.2.GA GHSA-47mp-rq2x-wjf2

Advisories 4

References