REDHAT-BUG-1628702: Medium severity Red Hat Undertow vulnerability
In some circumstances Undertow can serve data from a random ByteBuffer, this is due to an incomplete fix for UNDERTOW-438.
Basically if all the headers are not written out in the first write() call then the code that handles flushing the buffer will always write out the full contents of the writevBuffer buffer, which may contain data from previous requests.
Upstream bug:
https://issues.jboss.org/browse/JBEAP-15428
Upstream patch:
https://github.com/jbossas/redhat-undertow/commit/e65ad5b410f95b166ff04f876e22f873e9b4ce62
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1628702?
The severity of REDHAT-BUG-1628702 is classified as moderate.
How do I fix REDHAT-BUG-1628702?
To fix REDHAT-BUG-1628702, update to the latest patched version of Red Hat Undertow.
What causes REDHAT-BUG-1628702?
REDHAT-BUG-1628702 is caused by an incomplete fix for a previous issue, leading to improper data serving from a random ByteBuffer.
Which versions of Red Hat Undertow are affected by REDHAT-BUG-1628702?
All versions of Red Hat Undertow prior to the patch addressing REDHAT-BUG-1628702 are affected.
Is there a workaround for REDHAT-BUG-1628702?
Currently, there are no known workarounds for REDHAT-BUG-1628702 other than applying the fix.