Vulnerability Description
In version from 3.0.0 to 3.5.3 of Eclipse Vert.x, the WebSocket HTTP upgrade implementation buffers the full http request before doing the handshake, holding the entire request body in memory. There should be a reasonnable limit (8192 bytes) above which the WebSocket gets an HTTP response with the 413 status code and the connection gets closed.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Eclipse | Vert.X | >= 3.0.0, < 3.5.4 |
Related Weaknesses (CWE)
References
- https://access.redhat.com/errata/RHSA-2018:2946Third Party Advisory
- https://bugs.eclipse.org/bugs/show_bug.cgi?id=539170Vendor Advisory
- https://github.com/eclipse-vertx/vert.x/issues/2648Third Party Advisory
- https://lists.apache.org/thread.html/r01123837ffbfdf5809e0a4ac354ad546e4ca8f18df
- https://lists.apache.org/thread.html/r11789cd6d67ecca2d6f6bbb11e34495e68ee99287b
- https://lists.apache.org/thread.html/r1af71105539fe01fcecb92d2ecd8eea56c515fb1c8
- https://lists.apache.org/thread.html/r344235b1aea2f7fa2381495df1d77d02b595e3d7e4
- https://lists.apache.org/thread.html/r362835e6c7f34324ed24e318b363fcdd20cea91d0c
- https://lists.apache.org/thread.html/r3da899890536af744dec897fbc561fd9810ac45e79
- https://lists.apache.org/thread.html/r79789a0afb184abd13a2c07016e6e7ab8e64331f33
- https://lists.apache.org/thread.html/r8db0431ecf93f2dd2128db5ddca897b33ba883b7f1
- https://lists.apache.org/thread.html/r98dc06e2b1c498d0e9eb5038d8e1aefd24e411e505
- https://lists.apache.org/thread.html/rbdc279ecdb7ac496a03befb05a53605c4ce2b67e14
- https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995
- https://lists.apache.org/thread.html/re5ddabee26fbcadc7254d03a5a073d64080a9389ad
FAQ
What is CVE-2018-12541?
CVE-2018-12541 is a vulnerability with a CVSS score of 6.5 (MEDIUM). In version from 3.0.0 to 3.5.3 of Eclipse Vert.x, the WebSocket HTTP upgrade implementation buffers the full http request before doing the handshake, holding the entire request body in memory. There s...
How severe is CVE-2018-12541?
CVE-2018-12541 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-12541?
Check the references section above for vendor advisories and patch information. Affected products include: Eclipse Vert.X.