Description (CNA)
It was discovered that Undertow before 1.4.17, 1.3.31 and 2.0.0 processes http request headers with unusual whitespaces which can cause possible http request smuggling.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Red Hat / undertow | affected 1.4.17; affected 1.3.31; affected 2.0.0 |
CWE
CWE-444
References
- https://access.redhat.com/errata/RHSA-2018:1322
- https://access.redhat.com/errata/RHSA-2018:0002
- https://access.redhat.com/errata/RHSA-2017:3458
- https://access.redhat.com/errata/RHSA-2018:0004
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12165
- https://access.redhat.com/errata/RHSA-2017:3455
- https://access.redhat.com/errata/RHSA-2017:3456
- https://access.redhat.com/errata/RHSA-2018:0003
- https://access.redhat.com/errata/RHSA-2018:0005
- https://access.redhat.com/errata/RHSA-2017:3454
ADP enrichment
No English description supplied.
- https://access.redhat.com/errata/RHSA-2018:1322
- https://access.redhat.com/errata/RHSA-2018:0002
- https://access.redhat.com/errata/RHSA-2017:3458
- https://access.redhat.com/errata/RHSA-2018:0004
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12165
- https://access.redhat.com/errata/RHSA-2017:3455
- https://access.redhat.com/errata/RHSA-2017:3456
- https://access.redhat.com/errata/RHSA-2018:0003
- https://access.redhat.com/errata/RHSA-2018:0005
- https://access.redhat.com/errata/RHSA-2017:3454