CVE-2018-1067 — HTTP Request/Response Splitting in Redhat Undertow

CWE-113 — HTTP Request/Response Splitting11 documents7 sources
Severity
6.1MEDIUMNVD
EPSS
0.6%
top 29.77%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Redhat UndertowRedhat Jboss Enterprise Application PlatformRedhat Virtualization Host
Timeline
PublishedMay 21
Latest updateMay 13

Description

In Undertow before versions 7.1.2.CR1, 7.1.2.GA it was found that the fix for CVE-2016-4993 was incomplete and Undertow web server is vulnerable to the injection of arbitrary HTTP headers, and also response splitting, due to insufficient sanitization and validation of user input before the input is used as part of an HTTP header value.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.7

Affected Packages4 packages

▶NVDredhat/undertow2.0.0 — 2.0.5+1
▶Debianredhat/undertow< 1.4.25-1

🔴Vulnerability Details

4
OSV
Improper Neutralization of CRLF Sequences in HTTP Headers in Undertow↗2022-05-13
▶
GHSA
Improper Neutralization of CRLF Sequences in HTTP Headers in Undertow↗2022-05-13
▶
CVEList
CVE-2018-1067: In Undertow before versions 7↗2018-05-21
▶
OSV
CVE-2018-1067: In Undertow before versions 7↗2018-05-21
▶

📋Vendor Advisories

2
Red Hat
undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993)↗2018-04-25
▶
Debian
CVE-2018-1067: undertow - In Undertow before versions 7.1.2.CR1, 7.1.2.GA it was found that the fix for CV...↗2018
▶

💬Community

4
Bugzilla
CVE-2018-1067 tomcat: undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993) [fedora-all]↗2018-06-19
▶
Bugzilla
CVE-2018-1067 undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993) [fedora-all]↗2018-06-19
▶
Bugzilla
CVE-2018-1067 wildfly: undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993) [fedora-all]↗2018-06-19
▶
Bugzilla
CVE-2018-1067 undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993)↗2018-03-01
▶
CVE-2018-1067 — HTTP Request/Response Splitting | cvebase