CVE-2017-7657

EPSS 16.15%
Veröffentlicht 26.06.2018 16:29:00
Zuletzt bearbeitet 21.11.2024 03:32:23
Erkennungen
Login

In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), transfer-encoding chunks are handled poorly. The chunk length parsing was vulnerable to an integer overflow. Thus a large chunk size could be interpreted as a smaller chunk size and content sent as chunk body could be interpreted as a pipelined request. If Jetty was deployed behind an intermediary that imposed some authorization and that intermediary allowed arbitrarily large chunks to be passed on unchanged, then this flaw could be used to bypass the authorization imposed by the intermediary as the fake pipelined request would not be interpreted by the intermediary as a request.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 2 Referenzen 19

NVD 26 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Eclipse ≫ Jetty Version <= 9.2.26

Eclipse ≫ Jetty Version >= 9.3.0 < 9.3.24

Eclipse ≫ Jetty Version >= 9.4.0 < 9.4.11

Debian ≫ Debian Linux Version 9.0

Netapp ≫ E-series Santricity Management Version -

Netapp ≫ E-series Santricity Os Controller Version >= 11.0 <= 11.50.1

Netapp ≫ E-series Santricity Web Services Version -

Netapp ≫ Element Software Version -

Netapp ≫ Element Software Management Node Version -

Netapp ≫ Hci Storage Nodes Version -

Netapp ≫ Oncommand System Manager Version 3.x

Netapp ≫ Oncommand Unified Manager Version < 5.2.4

Netapp ≫ Santricity Cloud Connector Version -

Netapp ≫ Snap Creator Framework Version < 4.3.3

Netapp ≫ Snapcenter Version < 4.1p3

Netapp ≫ Snapmanager SwPlatform oracle Version < 3.4.2

Netapp ≫ Snapmanager SwPlatform sap Version < 3.4.2

Hp ≫ Xp P9000 Command View SwEdition advanced Version >= 8.4.0-00 < 8.6.2-00

Hp ≫ Xp P9000 Version -

Oracle ≫ Rest Data Services Version 11.2.0.4 SwEdition -

Oracle ≫ Rest Data Services Version 12.1.0.2 SwEdition -

Oracle ≫ Rest Data Services Version 12.2.0.1 SwEdition -

Oracle ≫ Rest Data Services Version 18c SwEdition -

Oracle ≫ Retail Xstore Point Of Service Version 7.1

Oracle ≫ Retail Xstore Point Of Service Version 15.0

Oracle ≫ Retail Xstore Point Of Service Version 16.0

Oracle ≫ Retail Xstore Point Of Service Version 17.0

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	16.15%	0.965

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

CWE-190 Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')

The product acts as an intermediary HTTP agent (such as a proxy or firewall) in the data flow between two entities such as a client and server, but it does not interpret malformed HTTP requests or responses in ways that are consistent with how the messages will be processed by those entities that are at the ultimate destination.

https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451%40%3Csolr-user.lucene.apache.org%3E

https://www.oracle.com//security-alerts/cpujul2021.html

https://access.redhat.com/errata/RHSA-2019:0910

Third Party Advisory

https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe%40%3Ccommits.druid.apache.org%3E

https://www.oracle.com/security-alerts/cpuoct2020.html

Patch

Third Party Advisory

https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html

Patch

Third Party Advisory

https://lists.apache.org/thread.html/053d9ce4d579b02203db18545fee5e33f35f2932885459b74d1e4272%40%3Cissues.activemq.apache.org%3E

https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E

http://www.securitytracker.com/id/1041194

Third Party Advisory

VDB Entry

https://security.netapp.com/advisory/ntap-20181014-0001/

Patch

Third Party Advisory

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03953en_us

Third Party Advisory

https://www.debian.org/security/2018/dsa-4278

Third Party Advisory

https://bugs.eclipse.org/bugs/show_bug.cgi?id=535668

Third Party Advisory

https://lists.apache.org/thread.html/r41af10c4adec8d34a969abeb07fd0d6ad0c86768b751464f1cdd23e8%40%3Ccommits.druid.apache.org%3E

https://lists.apache.org/thread.html/r9159c9e7ec9eac1613da2dbaddbc15691a13d4dbb2c8be974f42e6ae%40%3Ccommits.druid.apache.org%3E

https://lists.apache.org/thread.html/ra6f956ed4ec2855583b2d0c8b4802b450f593d37b77509b48cd5d574%40%3Ccommits.druid.apache.org%3E

https://nvd.nist.gov/vuln/detail/CVE-2017-7657

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2017-7657

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2017-7657

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2017-7657