PT-2018-1820 · Apache+5 · Apache Httpd+6

Nicolas Daniels · Published 2018-03-21 · Updated 2022-09-07 · CVE-2018-1312

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Apache httpd versions 2.2.0 through 2.4.29

Description The issue is related to the generation of an HTTP Digest authentication challenge, where the nonce sent to prevent reply attacks was not correctly generated using a pseudo-random seed. This could allow an attacker to replay HTTP requests across servers in a cluster using a common Digest authentication configuration without detection. The estimated number of potentially affected devices is not specified.

Recommendations For Apache httpd versions 2.2.0 through 2.4.29, consider updating to a version where this issue is fixed, as the use of a pseudo-random seed for generating nonces is crucial for preventing replay attacks. As a temporary workaround, consider restricting access to the Digest authentication configuration to minimize the risk of exploitation. Avoid using the same Digest authentication configuration across multiple servers in a cluster until the issue is resolved.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

ALT-PU-2018-1519

BDU:2018-01420

CESA-2019_1898

CVE-2018-1312

DLA-1389-1

DSA-4164-1

MGASA-2018-0460

RHSA-2018:3558

RHSA-2019:0367

RHSA-2019:1898

RHSA-2019_1898

SUSE-SU-2018:0879-1

SUSE-SU-2018:0901-1

SUSE-SU-2018:1079-1

SUSE-SU-2018:1161-1

SUSE-SU-2018:1161-2

USN-3627-1

USN-3627-2

USN-3937-2

Affected Products

Alt Linux

Apache Http Server

Apache Httpd

Centos

Red Hat

Suse

Ubuntu

References · 118

• https://usn.ubuntu.com/3937-2 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-04309 · Security Note
• https://linux.oracle.com/errata/ELSA-2019-1898.html · Vendor Advisory
• https://osv.dev/vulnerability/USN-3627-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1303 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-1312 · Security Note
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20210611SE16 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2019:0367 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-04105 · Security Note
• https://osv.dev/vulnerability/CVE-2018-1312 · Vendor Advisory
• https://httpd.apache.org/security/vulnerabilities_24.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-1312; · Security Note
• https://access.redhat.com/errata/RHSA-2019:1898 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1312 · Security Note
• https://access.redhat.com/errata/RHSA-2019:0366 · Vendor Advisory