Bug 2305290 (CVE-2024-7885) - CVE-2024-7885 undertow: Improper State Management in Proxy Protocol parsing causes information leakage
Summary: CVE-2024-7885 undertow: Improper State Management in Proxy Protocol parsing c...
Keywords:
Status: NEW
Alias: CVE-2024-7885
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
high
high
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2024-08-16 09:09 UTC by Michal Findra
Modified: 2024-10-07 12:46 UTC (History)
98 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
A vulnerability was found in Undertow where the ProxyProtocolReadListener reuses the same StringBuilder instance across multiple requests. This issue occurs when the parseProxyProtocolV1 method processes multiple requests on the same HTTP connection. As a result, different requests may share the same StringBuilder instance, potentially leading to information leakage between requests or responses. In some cases, a value from a previous request or response may be erroneously reused, which could lead to unintended data exposure. This issue primarily results in errors and connection termination but creates a risk of data leakage in multi-request environments.
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2024:6508 0 None None None 2024-09-09 17:17:40 UTC
Red Hat Product Errata RHSA-2024:6883 0 None None None 2024-09-19 16:47:06 UTC
Red Hat Product Errata RHSA-2024:7441 0 None None None 2024-10-01 07:52:55 UTC
Red Hat Product Errata RHSA-2024:7442 0 None None None 2024-10-01 07:54:34 UTC
Red Hat Product Errata RHSA-2024:7735 0 None None None 2024-10-07 12:18:25 UTC
Red Hat Product Errata RHSA-2024:7736 0 None None None 2024-10-07 12:46:56 UTC

Description Michal Findra 2024-08-16 09:09:20 UTC 
A vulnerability was found in Undertow where the ProxyProtocolReadListener reuses the same StringBuilder instance across multiple requests. This occurs when the parseProxyProtocolV1 method processes multiple requests on the same HTTP connection. As a result, different requests may share the same StringBuilder instance, potentially leading to information leakage between requests or responses. In some cases, a value from a previous request or response may be erroneously reused, which could lead to unintended data exposure. This issue primarily results in errors and connection termination but creates a risk of data leakage in multi-request environments.
Comment 1 errata-xmlrpc 2024-09-09 17:17:34 UTC 
This issue has been addressed in the following products:

  Red Hat build of Apache Camel 4.4.2 for Spring Boot

Via RHSA-2024:6508 https://access.redhat.com/errata/RHSA-2024:6508
Comment 2 errata-xmlrpc 2024-09-19 16:47:01 UTC 
This issue has been addressed in the following products:

  Red Hat build of Apache Camel 3.20.7 for Spring Boot

Via RHSA-2024:6883 https://access.redhat.com/errata/RHSA-2024:6883
Comment 3 errata-xmlrpc 2024-10-01 07:52:50 UTC 
This issue has been addressed in the following products:

  Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
  Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8

Via RHSA-2024:7441 https://access.redhat.com/errata/RHSA-2024:7441
Comment 4 errata-xmlrpc 2024-10-01 07:54:28 UTC 
This issue has been addressed in the following products:

  Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
  Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9

Via RHSA-2024:7442 https://access.redhat.com/errata/RHSA-2024:7442
Comment 5 errata-xmlrpc 2024-10-07 12:18:20 UTC 
This issue has been addressed in the following products:

  Red Hat JBoss Enterprise Application Platform

Via RHSA-2024:7735 https://access.redhat.com/errata/RHSA-2024:7735
Comment 6 errata-xmlrpc 2024-10-07 12:46:50 UTC 
This issue has been addressed in the following products:

  Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7
  Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8
  Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9

Via RHSA-2024:7736 https://access.redhat.com/errata/RHSA-2024:7736
Note You need to log in before you can comment on or make changes to this bug.