CVE-2014-3712: Medium severity katello vulnerability
Jan Rusnacko of Red Hat reports:
Katello code exposes potential tosym Denial of Service attack vector from user input parameters. The two places identified are:
https://github.com/Katello/katello/blob/9231e24f93fa804e557fc95637cfa2c5bb92f6a7/app/controllers/katello/contentsearchcontroller.rb#L617
https://github.com/Katello/katello/blob/9231e24f93fa804e557fc95637cfa2c5bb92f6a7/app/controllers/katello/api/apicontroller.rb#L87
This type of attack is documented here - http://docs.fedoraproject.org/en-US/FedoraSecurityTeam/1/html/SecureRubyDevelopmentGuide/RubySymbols.html
This has been confirmed in testing by Eric Helms of Red Hat.
Other sources
Katello allows remote attackers to cause a denial of service (memory consumption) via the (1) mode parameter in the setuputils function in contentsearchcontroller.rb or (2) action parameter in the respond function in api/apicontroller.rb in app/controllers/katello/, which is passed to the tosym method.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-3712?
CVE-2014-3712 is classified as a Denial of Service vulnerability.
How do I fix CVE-2014-3712?
To mitigate CVE-2014-3712, it is recommended to upgrade to the latest version of Katello that addresses this vulnerability.
What software is affected by CVE-2014-3712?
CVE-2014-3712 affects all versions of the Katello software.
What kind of attack does CVE-2014-3712 facilitate?
CVE-2014-3712 can facilitate a Denial of Service attack through user input parameters.
Who reported CVE-2014-3712?
CVE-2014-3712 was reported by Jan Rusnacko of Red Hat.