CVE-2018-17194
published 2018-12-19CVE-2018-17194: When a client request to a cluster node was replicated to other nodes in the cluster for verification, the Content-Length was forwarded. On a DELETE request…
PriorityP339high7.5CVSS 3.0
AVNACLPRNUINSUCNINAH
EPSS
2.97%
85.7th percentile
When a client request to a cluster node was replicated to other nodes in the cluster for verification, the Content-Length was forwarded. On a DELETE request, the body was ignored, but if the initial request had a Content-Length value other than 0, the receiving nodes would wait for the body and eventually timeout. Mitigation: The fix to check DELETE requests and overwrite non-zero Content-Length header values was applied on the Apache NiFi 1.8.0 release. Users running a prior 1.x release should upgrade to the appropriate release.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache | nifi | — | — |
| apache | nifi | 1.0.0 – 1.7.1 | — |
| apache_software_foundation | apache_nifi | — | — |
CVSS provenance
nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
vendor_apache7.5
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
Apache NiFi Improper Input Validation vulnerability
osv·2018-12-20
CVE-2018-17194 [HIGH] Apache NiFi Improper Input Validation vulnerability
Apache NiFi Improper Input Validation vulnerability
When a client request to a cluster node was replicated to other nodes in the cluster for verification, the Content-Length was forwarded. On a DELETE request, the body was ignored, but if the initial request had a Content-Length value other than 0, the receiving nodes would wait for the body and eventually timeout. Mitigation: The fix to check DELETE requests and overwrite non-zero Content-Length header values was applied on the Apache NiFi 1.8.0 release. Users running a prior 1.x release should upgrade to the appropriate release.
GHSA
Apache NiFi Improper Input Validation vulnerability
ghsa·2018-12-20
CVE-2018-17194 [HIGH] CWE-20 Apache NiFi Improper Input Validation vulnerability
Apache NiFi Improper Input Validation vulnerability
When a client request to a cluster node was replicated to other nodes in the cluster for verification, the Content-Length was forwarded. On a DELETE request, the body was ignored, but if the initial request had a Content-Length value other than 0, the receiving nodes would wait for the body and eventually timeout. Mitigation: The fix to check DELETE requests and overwrite non-zero Content-Length header values was applied on the Apache NiFi 1.8.0 release. Users running a prior 1.x release should upgrade to the appropriate release.
Apache
Apache nifi: CVE-2018-17194
vendor_apache·CVSS 7.5
CVE-2018-17194 Apache nifi: CVE-2018-17194
Apache nifi: CVE-2018-17194
Title: Potential Denial of Service with HTTP DELETE Cluster Replication Requests Published: 2018-10-26 Severity: Medium Products: Apache NiFi Affected Versions: 1.0.0 to 1.7.1 Fixed Versions: 1.8.0 Reporter: Mike Cole and Andy LoPresto References CVE Record: CVE-2018-17194 NVD Record: CVE-2018-17194 Apache Jira Issue: NIFI-5628 GitHub Pull Request: 3035 When a client request to a cluster node was replicated to other nodes in the cluster for verification, the Content-Length was forwarded. On a DELETE request, the body was ignored, but if the initial request had a Content-Length value other than 0, the receiving nodes would wait for the body and eventually timeout. NiFi 1.8.0 checks DELETE requests and overwrites non-zero Content-Length header. Users running a pri
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2018-12-19
Published