PT-2018-11244 · Eclipse · Eclipse Vert.X

Vietj · Published 2018-10-10 · Updated 2022-04-19 · CVE-2018-12541

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Eclipse Vert.x versions 3.0.0 through 3.5.3

Description The WebSocket HTTP upgrade implementation in Eclipse Vert.x buffers the full HTTP request before doing the handshake, holding the entire request body in memory. It is recommended to have a reasonable limit, above which the WebSocket gets an HTTP response with the 413 status code and the connection gets closed. The suggested limit is 8192 bytes.

Recommendations For Eclipse Vert.x versions 3.0.0 through 3.5.3, consider implementing a limit on the HTTP request body size to prevent excessive memory usage, and return an HTTP response with the 413 status code when this limit is exceeded.

Fix

Buffer Overflow

Weakness Enumeration

CWE-789

CWE-119

Related Identifiers

CVE-2018-12541

GHSA-45XM-V8GQ-7JQX

Affected Products

Eclipse Vert.X

References · 39

• https://bugs.eclipse.org/bugs/show_bug.cgi?id=539170 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2018:2946 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-12541 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-45xm-v8gq-7jqx · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-12541 · Security Note
• https://github.com/eclipse-vertx/vert.x · Note
• https://github.com/eclipse-vertx/vert.x/commit/269a583330695d1418a4f5578f7169350b2e1332 · Note
• https://github.com/eclipse-vertx/vert.x/issues/2648 · Note
• https://lists.apache.org/thread.html/re5ddabee26fbcadc7254d03a5a073d64080a9389adc9e452529664ed@%3Ccommits.pulsar.apache.org%3E · Note
• https://lists.apache.org/thread.html/r3da899890536af744dec897fbc561fd9810ac45e79a16164b53c31b2@%3Ccommits.pulsar.apache.org%3E · Note
• https://t.me/cvenotify/13424 · Telegram Post
• https://lists.apache.org/thread.html/r3da899890536af744dec897fbc561fd9810ac45e79a16164b53c31b2%40%3Ccommits.pulsar.apache.org%3E · Note
• https://lists.apache.org/thread.html/r362835e6c7f34324ed24e318b363fcdd20cea91d0cea0b2e1164f73e%40%3Cissues.bookkeeper.apache.org%3E · Note
• https://lists.apache.org/thread.html/re5ddabee26fbcadc7254d03a5a073d64080a9389adc9e452529664ed%40%3Ccommits.pulsar.apache.org%3E · Note
• https://lists.apache.org/thread.html/r01123837ffbfdf5809e0a4ac354ad546e4ca8f18df89ee5a10eeb81b@%3Cissues.bookkeeper.apache.org%3E · Note