Bug 2210366 (CVE-2023-2798) - CVE-2023-2798 htmlUnit: Stack overflow crash causes Denial of Service (DoS)
Summary: CVE-2023-2798 htmlUnit: Stack overflow crash causes Denial of Service (DoS)
Keywords:
Status: CLOSED ERRATA
Alias: CVE-2023-2798
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 2210640 2210642
Blocks: 2210115
TreeView+ depends on / blocked
 
Reported: 2023-05-26 20:09 UTC by Patrick Del Bello
Modified: 2023-11-14 21:20 UTC (History)
59 users (show)

Fixed In Version: htmlunit 2.70.0
Doc Type: ---
Doc Text:
A flaw was found in HtmlUnit. This issue may allow a malicious user to supply content to htmlUnit, which could cause a crash by stack overflow, leading to a Denial of Service (DoS).
Clone Of:
Environment:
Last Closed: 2023-06-27 15:29:53 UTC
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2023:3814 0 None None None 2023-06-27 10:56:44 UTC
Red Hat Product Errata RHSA-2023:4627 0 None None None 2023-08-14 01:03:05 UTC

Description Patrick Del Bello 2023-05-26 20:09:48 UTC 
Those using HtmlUnit to browse untrusted webpages may be vulnerable to Denial of service attacks (DoS). If HtmlUnit is running on user supplied web pages, an attacker may supply content that causes HtmlUnit to crash by a stack overflow. This effect may support a denial of service attack.This issue affects htmlunit before 2.70.0.



https://github.com/HtmlUnit/htmlunit/commit/940dc7fd
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54613
Comment 1 Avinash Hanwate 2023-05-29 04:15:59 UTC 
Created rstudio tracking bugs for this issue:

Affects: fedora-all [bug 2210640]


Created rubygem-nokogiri tracking bugs for this issue:

Affects: fedora-all [bug 2210642]
Comment 3 errata-xmlrpc 2023-06-27 10:56:41 UTC 
This issue has been addressed in the following products:

  Migration Toolkit for Runtimes 1 on RHEL 8

Via RHSA-2023:3814 https://access.redhat.com/errata/RHSA-2023:3814
Comment 4 Product Security DevOps Team 2023-06-27 15:29:48 UTC 
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s):

https://access.redhat.com/security/cve/cve-2023-2798
Comment 5 errata-xmlrpc 2023-08-14 01:03:01 UTC 
This issue has been addressed in the following products:

  MTA-6.2-RHEL-9
  MTA-6.2-RHEL-8

Via RHSA-2023:4627 https://access.redhat.com/errata/RHSA-2023:4627
Note You need to log in before you can comment on or make changes to this bug.