REDHAT-BUG-1628702
First published: Thu Sep 13 2018(Updated: )
In some circumstances Undertow can serve data from a random ByteBuffer, this is due to an incomplete fix for UNDERTOW-438. Basically if all the headers are not written out in the first write() call then the code that handles flushing the buffer will always write out the full contents of the writevBuffer buffer, which may contain data from previous requests. Upstream bug: <a href="https://issues.jboss.org/browse/JBEAP-15428">https://issues.jboss.org/browse/JBEAP-15428</a> Upstream patch: <a href="https://github.com/jbossas/redhat-undertow/commit/e65ad5b410f95b166ff04f876e22f873e9b4ce62">https://github.com/jbossas/redhat-undertow/commit/e65ad5b410f95b166ff04f876e22f873e9b4ce62</a>
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Undertow |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://issues.jboss.org/browse/JBEAP-15428
- https://github.com/jbossas/redhat-undertow/commit/e65ad5b410f95b166ff04f876e22f873e9b4ce62
- https://access.redhat.com/errata/RHSA-2019:0362
- https://access.redhat.com/errata/RHSA-2019:0364
- https://access.redhat.com/errata/RHSA-2019:0365
- https://access.redhat.com/errata/RHSA-2019:0380
- https://access.redhat.com/errata/RHSA-2019:1106
- https://access.redhat.com/errata/RHSA-2019:1107
- https://access.redhat.com/errata/RHSA-2019:1108
- https://access.redhat.com/errata/RHSA-2019:1140
- https://access.redhat.com/support/policy/updates/jboss_notes
- https://access.redhat.com/security/cve/cve-2018-14642
- https://bugzilla.redhat.com/show_bug.cgi?id=1628702
Frequently Asked Questions
What is the severity of REDHAT-BUG-1628702?
The severity of REDHAT-BUG-1628702 is classified as moderate.
How do I fix REDHAT-BUG-1628702?
To fix REDHAT-BUG-1628702, update to the latest patched version of Red Hat Undertow.
What causes REDHAT-BUG-1628702?
REDHAT-BUG-1628702 is caused by an incomplete fix for a previous issue, leading to improper data serving from a random ByteBuffer.
Which versions of Red Hat Undertow are affected by REDHAT-BUG-1628702?
All versions of Red Hat Undertow prior to the patch addressing REDHAT-BUG-1628702 are affected.
Is there a workaround for REDHAT-BUG-1628702?
Currently, there are no known workarounds for REDHAT-BUG-1628702 other than applying the fix.
- agent/type
- agent/last-modified-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2018-14642
- agent/first-publish-date
- agent/source
- agent/references
- agent/description
- agent/severity
- agent/event
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/red hat
- canonical/undertow