CVE-2022-1319: High severity redhat Openshift Application Runtimes vulnerability

Published Apr 11, 2022
·
Updated

A flaw was found in Undertow. For an AJP 400 response, EAP 7 is improperly sending two response packets, and those packets have the reuse flag set even though JBoss EAP closes the connection. A failure occurs when the connection is reused after a 400 by CPING since it reads in the second SENDHEADERS response packet instead of a CPONG.

Other sources

For an AJP 400 response, EAP 7 is improperly sending two response packets and those 'END RESPONSE' packets have the reuse flag set even though JBoss does close the connection. So when httpd reuses that connection after a 400 for something like a cping, it will receive a failure since it reads in the second SENDHEADERS response packet instead of a CPONG.

— Red Hat

Affected Software

24 affected componentsFixes available
redhat/eap7-undertow<0:2.2.17-2.SP4_redhat_00001.1.el8ea
0:2.2.17-2.SP4_redhat_00001.1.el8ea
redhat/eap7-undertow<0:2.2.17-2.SP4_redhat_00001.1.el7ea
0:2.2.17-2.SP4_redhat_00001.1.el7ea
redhat/rh-sso7-keycloak<0:18.0.3-1.redhat_00001.1.el7
0:18.0.3-1.redhat_00001.1.el7
redhat/rh-sso7-keycloak<0:18.0.3-1.redhat_00001.1.el8
0:18.0.3-1.redhat_00001.1.el8
redhat/rh-sso7<0:1-5.el9
0:1-5.el9
redhat/rh-sso7-javapackages-tools<0:6.0.0-7.el9
0:6.0.0-7.el9
redhat/rh-sso7-keycloak<0:18.0.3-1.redhat_00001.1.el9
0:18.0.3-1.redhat_00001.1.el9
redhat Openshift Application Runtimes
redhat Single Sign-on=7.0
redhat undertow<2.2.17
redhat undertow=2.2.17
redhat undertow=2.2.17-sp1
redhat undertow=2.2.17-sp2
redhat undertow=2.2.19
redhat undertow=2.2.19-sp1
redhat undertow=2.3.0-alpha1
NetApp Active Iq Unified Manager Linux
NetApp Active Iq Unified Manager Vmware Vsphere
NetApp Active Iq Unified Manager Windows
NetApp Cloud Secure Agent
NetApp OnCommand Insight
NetApp OnCommand Workflow Automation
debian/undertow<2.2.17-1
2.2.17-1
debian/undertow
2.3.20-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade redhat/eap7-undertow to a version that resolves this vulnerability.

    Fixed in 0:2.2.17-2.SP4_redhat_00001.1.el8ea
  2. Upgrade

    Upgrade redhat/eap7-undertow to a version that resolves this vulnerability.

    Fixed in 0:2.2.17-2.SP4_redhat_00001.1.el7ea
  3. Upgrade

    Upgrade redhat/rh-sso7-keycloak to a version that resolves this vulnerability.

    Fixed in 0:18.0.3-1.redhat_00001.1.el7
  4. Upgrade

    Upgrade redhat/rh-sso7-keycloak to a version that resolves this vulnerability.

    Fixed in 0:18.0.3-1.redhat_00001.1.el8
  5. Upgrade

    Upgrade redhat/rh-sso7 to a version that resolves this vulnerability.

    Fixed in 0:1-5.el9
  6. Upgrade

    Upgrade redhat/rh-sso7-javapackages-tools to a version that resolves this vulnerability.

    Fixed in 0:6.0.0-7.el9
  7. Upgrade

    Upgrade redhat/rh-sso7-keycloak to a version that resolves this vulnerability.

    Fixed in 0:18.0.3-1.redhat_00001.1.el9
  8. Upgrade

    Upgrade debian/undertow to a version that resolves this vulnerability.

    Fixed in 2.3.20-1
  9. Upgrade

    Upgrade debian/undertow to a version that resolves this vulnerability.

    Fixed in 2.2.17-1

Event History

Apr 11, 2022
CVE Published
12:00 AM
Data Sourced
via Red Hat·04:31 AM
DescriptionSeverityAffected Software
Aug 31, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionWeakness
Data Sourced
via NVD·04:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Nov 3, 2026
Data Sourced
via OSV·08:01 AM
SeverityAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Frequently Asked Questions

1

What is the vulnerability ID of this flaw?

The vulnerability ID of this flaw is CVE-2022-1319.

2

What is the severity level of CVE-2022-1319?

The severity level of CVE-2022-1319 is high with a score of 7.5.

3

How does EAP 7 handle the AJP 400 response in CVE-2022-1319?

EAP 7 improperly sends two response packets for an AJP 400 response, which causes a failure when the connection is reused.

4

Which software packages are affected by CVE-2022-1319?

The affected software packages include eap7-undertow, rh-sso7-keycloak, Redhat Openshift Application Runtimes, Redhat Single Sign-on, and Netapp Active Iq Unified Manager.

5

How can I fix CVE-2022-1319?

Apply the appropriate security updates provided by the vendor to fix CVE-2022-1319.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203