Vulnerability Name:

CVE-2017-2670 (CCN-148142)

Assigned:2016-12-01
Published:2018-07-26
Updated:2019-10-09
Summary:It was found in Undertow before 1.3.28 that with non-clean TCP close, the Websocket server gets into infinite loop on every IO thread, effectively causing DoS.
CVSS v3 Severity:7.5 High (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
6.5 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): High
7.5 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
6.5 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): High
CVSS v2 Severity:5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Partial
7.8 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Complete
Vulnerability Type:CWE-835
Vulnerability Consequences:Denial of Service
References:Source: MITRE
Type: CNA
CVE-2017-2670

Source: REDHAT
Type: Vendor Advisory
RHSA-2017:1409

Source: CCN
Type: undertow Web site
JBoss Community

Source: BID
Type: Third Party Advisory, VDB Entry
98965

Source: CCN
Type: BID-98965
Red Hat Undertow CVE-2017-2670 Remote Denial of Service Vulnerability

Source: REDHAT
Type: Vendor Advisory
RHSA-2017:1410

Source: REDHAT
Type: Vendor Advisory
RHSA-2017:1411

Source: REDHAT
Type: Vendor Advisory
RHSA-2017:1412

Source: REDHAT
Type: Vendor Advisory
RHSA-2017:3454

Source: REDHAT
Type: Vendor Advisory
RHSA-2017:3455

Source: REDHAT
Type: Vendor Advisory
RHSA-2017:3456

Source: REDHAT
Type: Vendor Advisory
RHSA-2017:3458

Source: CCN
Type: Red Hat Bugzilla – Bug 1438885
(CVE-2017-2670) CVE-2017-2670 undertow: IO thread DoS via unclean Websocket closing

Source: CONFIRM
Type: Issue Tracking, Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2670

Source: XF
Type: UNKNOWN
undertow-cve20172670-dos(148142)

Source: DEBIAN
Type: Third Party Advisory
DSA-3906

Source: CCN
Type: WhiteSource Vulnerability Database
CVE-2017-2670

Vulnerable Configuration:Configuration 1:
  • cpe:/a:redhat:undertow:*:*:*:*:*:*:*:* (Version < 1.3.28)

    • Configuration 2:
  • cpe:/o:debian:debian_linux:9.0:*:*:*:*:*:*:*

    • Configuration 3:
  • cpe:/a:redhat:jboss_enterprise_application_platform:6.0.0:*:*:*:*:*:*:*
  • OR cpe:/a:redhat:jboss_enterprise_application_platform:7.0.0:*:*:*:*:*:*:*
  • OR cpe:/a:redhat:jboss_enterprise_application_platform:7.1.0:*:*:*:*:*:*:*
  • AND
  • cpe:/o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/a:redhat:undertow:1.3.27:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:com.ubuntu.disco:def:201726700000000
    V
    		CVE-2017-2670 on Ubuntu 19.04 (disco) - medium.
    2018-07-27
    oval:com.ubuntu.cosmic:def:201726700000000
    V
    		CVE-2017-2670 on Ubuntu 18.10 (cosmic) - medium.
    2018-07-27
    oval:com.ubuntu.bionic:def:20172670000
    V
    		CVE-2017-2670 on Ubuntu 18.04 LTS (bionic) - medium.
    2018-07-27
    oval:com.ubuntu.bionic:def:201726700000000
    V
    		CVE-2017-2670 on Ubuntu 18.04 LTS (bionic) - medium.
    2018-07-27
    oval:com.ubuntu.cosmic:def:20172670000
    V
    		CVE-2017-2670 on Ubuntu 18.10 (cosmic) - medium.
    2018-07-27
    oval:com.ubuntu.xenial:def:201726700000000
    V
    		CVE-2017-2670 on Ubuntu 16.04 LTS (xenial) - medium.
    2018-07-27
    oval:com.ubuntu.xenial:def:20172670000
    V
    		CVE-2017-2670 on Ubuntu 16.04 LTS (xenial) - medium.
    2018-07-27
    oval:com.ubuntu.artful:def:20172670000
    V
    		CVE-2017-2670 on Ubuntu 17.10 (artful) - medium.
    2017-06-08
    BACK
    redhat undertow *
    debian debian linux 9.0
    redhat jboss enterprise application platform 6.0.0
    redhat jboss enterprise application platform 7.0.0
    redhat jboss enterprise application platform 7.1.0
    redhat enterprise linux 6.0
    redhat enterprise linux 7.0
    redhat undertow 1.3.27