PT-2018-17920 · Node.Js+4 · Node.Js+4

Chalker + 1 · Published 2018-04-16 · Updated 2020-02-13 · CVE-2018-7159

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Node.js versions (affected versions not specified)

Description The HTTP parser in Node.js ignores spaces in the Content-Length header, allowing input such as Content-Length: 1 2 to be interpreted as having a value of 12. This does not align with the HTTP specification, which does not allow for spaces in the Content-Length value. The security risk of this flaw is considered to be very low, as it is difficult to craft an attack that makes use of this flaw in a way that could not already be achieved by supplying an incorrect value for Content-Length. However, vulnerabilities may exist in user-code that make incorrect assumptions about the potential accuracy of this value compared to the actual length of the data supplied.

Recommendations For all affected versions, users crafting lower-level HTTP utilities are advised to re-check the length of any input supplied after parsing is complete. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

CWE-115

Related Identifiers

ALT-PU-2018-1764

AZL-40842

CESA-2019_2258

CVE-2018-7159

MGASA-2019-0277

RHSA-2018:2949

RHSA-2019:2258

RHSA-2019_2258

SUSE-SU-2018:0952-1

SUSE-SU-2018:1183-1

SUSE-SU-2019:14246-1

SUSE-SU-2019_14246-1

Affected Products

Alt Linux

Centos

Node.Js

Red Hat

Suse

References · 276

• 🔥 https://github.com/tunz/js-vuln-db/blob/master/v8/CVE-2016-5172.md · Exploit
• 🔥 https://github.com/ssllabs/openssl-ccs-cve-2014-0224 · Exploit
• 🔥 https://github.com/secretnonempty/CVE-2014-0224 · Exploit
• 🔥❌ https://github.com/alidnf/CVE-2019-11730 · Exploit, Deleted
• https://nvd.nist.gov/vuln/detail/CVE-2018-7159 · Security Note
• https://linux.oracle.com/errata/ELSA-2019-2258.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-7159 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2019:14246-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2018-7159 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2019:2258 · Vendor Advisory
• https://nodejs.org/en/blog/vulnerability/march-2018-security-releases · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2018:0952-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-7159 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2019-0277.html · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2018:1183-1 · Vendor Advisory