Lucene search

CVE-2018-1067

🗓️ 21 May 2018 17:00:29Reported by [email protected]Type

Undertow web server is vulnerable to injection of arbitrary HTTP header

Reporter	Title	Published	Views	Family All 56
OSV	CVE-2018-1067	21 May 201817:29	–	osv
OSV	Improper Neutralization of CRLF Sequences in HTTP Headers in Undertow	13 May 202201:14	–	osv
OSV	Improper Neutralization of CRLF Sequences in Wildfly Undertow	17 May 202200:15	–	osv
OSV	RHSA-2016:1840 Red Hat Security Advisory: eap7-jboss-ec2-eap security, bug fix, and enhancement update	15 Sep 202423:37	–	osv
OSV	RHSA-2016:1839 Red Hat Security Advisory: JBoss Enterprise Application Platform 7.0.2 for RHEL 7	15 Sep 202423:37	–	osv
OSV	RHSA-2016:1838 Red Hat Security Advisory: JBoss Enterprise Application Platform 7.0.2 on RHEL 6	15 Sep 202423:37	–	osv
OSV	RHSA-2018:1249 Red Hat Security Advisory: jboss-ec2-eap package for EAP 7.1.2	13 Sep 202419:48	–	osv
OSV	RHSA-2018:1248 Red Hat Security Advisory: JBoss Enterprise Application Platform 7.1.2 on RHEL 6	13 Sep 202419:47	–	osv
OSV	RHSA-2018:1247 Red Hat Security Advisory: JBoss Enterprise Application Platform 7.1.2 for RHEL 7	13 Sep 202419:48	–	osv
OSV	RHSA-2018:2643 Red Hat Security Advisory: rhvm-appliance security update	20 Sep 202413:51	–	osv

Nvd

Node

redhat undertowRange<1.4.25

redhat undertowRange2.0.0–2.0.5

Node

redhat jboss_enterprise_application_platformMatch7.1

AND

redhat enterprise_linuxMatch6.0

redhat enterprise_linuxMatch7.0

Node

redhat virtualization_hostMatch4.0

AND

redhat enterprise_linuxMatch7.0

Source	Link
access	www.access.redhat.com/errata/RHSA-2018:1249
access	www.access.redhat.com/errata/RHSA-2018:2643
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
access	www.access.redhat.com/errata/RHSA-2018:1251
access	www.access.redhat.com/errata/RHSA-2018:1248
access	www.access.redhat.com/errata/RHSA-2018:1247
access	www.access.redhat.com/errata/RHSA-2019:0877

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

21 May 2018 17:29Current

6.1Medium risk

Vulners AI Score6.1

CVSS25.8

CVSS36.1

EPSS0.00497

CWE-113