PT-2017-10349 · Simplesamlphp · Simplesamlphp+1

Artem-Diverta · Publicado 2017-02-16 · Atualizado 2022-05-14 · CVE-2016-9814

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions SimpleSAMLphp versions prior to 1.14.10 simplesamlphp/saml2 library versions prior to 1.9.1 simplesamlphp/saml2 library 1.10.x versions prior to 1.10.3 simplesamlphp/saml2 library 2.x versions prior to 2.3.3

Description The issue allows remote attackers to spoof SAML responses or possibly cause a denial of service by leveraging improper conversion of return values to boolean in the validateSignature method. This method is part of the SAML2Utils class in SimpleSAMLphp and the simplesamlphp/saml2 library.

Recommendations For SimpleSAMLphp versions prior to 1.14.10, update to version 1.14.10 or later. For simplesamlphp/saml2 library versions prior to 1.9.1, update to version 1.9.1 or later. For simplesamlphp/saml2 library 1.10.x versions prior to 1.10.3, update to version 1.10.3 or later. For simplesamlphp/saml2 library 2.x versions prior to 2.3.3, update to version 2.3.3 or later. As a temporary workaround, consider disabling the validateSignature method until a patch is available.

Exploit

Correção

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2016-9814

DLA-1298-1

GHSA-R8V4-7VWJ-983X

Produtos afetados

Simplesamlphp

Simplesamlphp/Saml2

Referências · 17

• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/simplesamlphp/saml2/CVE-2016-9814.yaml · Exploit
• https://github.com/simplesamlphp/simplesamlphp · Nota
• https://github.com/simplesamlphp/saml2/commit/7008b0916426212c1cc2fc238b38ab9ebff0748c · Nota
• https://github.com/simplesamlphp/saml2/pull/81 · Nota
• http://openwall.com/lists/oss-security/2016/12/03/5 · Nota
• https://simplesamlphp.org/security/201612-01 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-9814 · Nota de Segurança
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-9814 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-9814 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2016-9814 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2016-9814 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2016-9814 · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2016-9814 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9814 · Nota
• https://lists.debian.org/debian-lts-announce/2018/03/msg00001.html · Nota