PT-2018-7155 · Red Hat · Keycloak

Chess Hazlett · Published 2018-07-27 · Updated 2019-10-09 · CVE-2017-2646

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Keycloak versions prior to 2.5.5

Description: The issue arises when a Logout request with Extensions in the middle of the request is received, causing the SAMLSloRequestParser.parse() method to enter an infinite loop. This can be exploited by an attacker to conduct denial of service attacks.

Recommendations: For versions prior to 2.5.5, update to version 2.5.5 or later to resolve the issue. As a temporary workaround, consider restricting or validating the input for the Logout request to prevent the infinite loop in the SAMLSloRequestParser.parse() method.

Fix

DoS

Infinite Loop

Weakness Enumeration

CWE-835

Related Identifiers

CVE-2017-2646

GHSA-JC6Q-27MW-P55W

Affected Products

Keycloak

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2017-2646 · Security Note
• https://osv.dev/vulnerability/GHSA-jc6q-27mw-p55w · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-2646 · Vendor Advisory
• https://github.com/keycloak/keycloak · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2646 · Note
• https://github.com/advisories/GHSA-jc6q-27mw-p55w · Note
• http://securityfocus.com/bid/96882 · Note