CVE-2018-12541: Buffer Overflow
In version from 3.0.0 to 3.5.3 of Eclipse Vert.x, the WebSocket HTTP upgrade implementation buffers the full http request before doing the handshake, holding the entire request body in memory. There should be a reasonnable limit (8192 bytes) above which the WebSocket gets an HTTP response with the 413 status code and the connection gets closed.
Other sources
It was found that the WebSocket HTTP upgrade implementation buffers the full http request before doing the handshake, holding the entire request body in memory.
Upstream issue:
https://github.com/eclipse-vertx/vert.x/issues/2648
References:
https://bugs.eclipse.org/bugs/showbug.cgi?id=539170
Upstream patch:
https://github.com/eclipse-vertx/vert.x/commit/269a583330695d1418a4f5578f7169350b2e1332
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2018-12541?
CVE-2018-12541 has a severity rating that indicates a vulnerability in how Eclipse Vert.x handles WebSocket HTTP upgrades.
How do I fix CVE-2018-12541?
To fix CVE-2018-12541, upgrade Eclipse Vert.x to version 3.5.4 or later.
What versions of Eclipse Vert.x are affected by CVE-2018-12541?
Eclipse Vert.x versions from 3.0.0 to 3.5.3 are affected by CVE-2018-12541.
What impact does CVE-2018-12541 have on Eclipse Vert.x applications?
CVE-2018-12541 can lead to excessive memory usage due to unbounded buffering of WebSocket requests.
Is CVE-2018-12541 a critical vulnerability?
CVE-2018-12541 is not rated as critical, but it poses a significant risk due to potential resource exhaustion.