CVE-2020-27782

A flaw was found in the Undertow AJP connector. Malicious requests and abrupt connection closes could be triggered by an attacker using query strings with non-RFC compliant characters resulting in a denial of service. The highest threat from this vulnerability is to system availability. This affects Undertow 2.1.5.SP1, 2.0.33.SP2, and 2.2.3.SP1.

CVSS v3 7.5 HIGH
CVSS v2.0 7.8 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

7.8^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability : 10.0 / Impact : 6.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References

Link	Resource
https://bugzilla.redhat.com/show_bug.cgi?id=1901304	Issue Tracking Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:redhat:jboss_fuse:6.0.0:::::::*
	cpe:2.3:a:redhat:jboss_fuse:7.0.0:::::::*
	cpe:2.3:a:redhat:openshift_application_runtimes:-:::::::*
	cpe:2.3:a:redhat:undertow:2.0.33:sp2::::::
	cpe:2.3:a:redhat:undertow:2.1.5:sp1::::::
	cpe:2.3:a:redhat:undertow:2.2.3:sp1::::::

History

No history.

Information

Published : 2021-02-23 19:15

Updated : 2024-02-28 18:08

NVD link : CVE-2020-27782

Mitre link : CVE-2020-27782

CVE.ORG link : CVE-2020-27782

JSON object : View

Products Affected

redhat

undertow
jboss_fuse
openshift_application_runtimes

CWE

CWE-400

Uncontrolled Resource Consumption

{"id": "CVE-2020-27782", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2021-02-23T19:15:13.150", "references": [{"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1901304", "tags": ["Issue Tracking", "Vendor Advisory"], "source": "secalert@redhat.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "secalert@redhat.com", "description": [{"lang": "en", "value": "CWE-400"}]}], "descriptions": [{"lang": "en", "value": "A flaw was found in the Undertow AJP connector. Malicious requests and abrupt connection closes could be triggered by an attacker using query strings with non-RFC compliant characters resulting in a denial of service. The highest threat from this vulnerability is to system availability. This affects Undertow 2.1.5.SP1, 2.0.33.SP2, and 2.2.3.SP1."}, {"lang": "es", "value": "Se encontr\u00f3 un fallo en el conector AJP de Undertow. Peticiones maliciosas y cierres de conexiones abruptas podr\u00edan ser desencadenadas por un atacante usando cadenas de consulta con caracteres que no cumplen con RFC, resultando en una denegaci\u00f3n de servicio. La mayor amenaza de esta vulnerabilidad es la disponibilidad del sistema. Esto afecta a Undertow versiones 2.1.5.SP1, 2.0.33.SP2 y 2.2.3.SP1"}], "lastModified": "2021-02-27T03:34:42.337", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:redhat:jboss_fuse:6.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A305F012-544E-4245-9D69-1C8CD37748B1"}, {"criteria": "cpe:2.3:a:redhat:jboss_fuse:7.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B40CCE4F-EA2C-453D-BB76-6388767E5C6D"}, {"criteria": "cpe:2.3:a:redhat:openshift_application_runtimes:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A33441B3-B301-426C-A976-08CE5FE72EFB"}, {"criteria": "cpe:2.3:a:redhat:undertow:2.0.33:sp2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A2CDD487-FEA3-4471-B9F3-A2C24278DBF8"}, {"criteria": "cpe:2.3:a:redhat:undertow:2.1.5:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "914B537C-9326-49DB-BED4-38203821613D"}, {"criteria": "cpe:2.3:a:redhat:undertow:2.2.3:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0022DD37-7025-469C-B855-B38D516D2C9B"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}