PT-2020-18339 · Uap · Uap-Core

Bcaller + 1 · Published 2020-02-20 · Updated 2024-02-08 · CVE-2020-5243

Positive Technologies (AI Summary)

CVSS v3.1

5.7

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions uap-core versions prior to 0.7.3

Description The issue allows remote attackers to overload a server by setting the User-Agent header in an HTTP(S) request to maliciously crafted long strings. This is due to some regexes being vulnerable to regular expression denial of service (REDoS) because of overlapping capture groups. Each vulnerable regular expression contains 3 overlapping capture groups, and backtracking has approximately cubic time complexity with respect to the length of the user-agent string.

Recommendations Update uap-core to version 0.7.3 or later to resolve the issue. As a temporary workaround, consider restricting the length of the User-Agent header in HTTP(S) requests to prevent exploitation. Additionally, disabling or restricting the use of the vulnerable regexes can help minimize the risk of exploitation until a patch is applied.

Exploit

Fix

DoS

RCE

Weakness Enumeration

CWE-1333

CWE-20

Related Identifiers

CVE-2020-5243

GHSA-CMCX-XHR8-3W9P

Affected Products

Uap-Core

References · 13

• 🔥 https://github.com/ua-parser/uap-core/security/advisories/GHSA-cmcx-xhr8-3w9p · Exploit
• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/user_agent_parser/CVE-2020-5243.yml · Exploit
• https://github.com/ua-parser/uap-core/commit/0afd61ed85396a3b5316f18bfd1edfaadf8e88e1 · Patch
• https://osv.dev/vulnerability/CVE-2020-5243 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2020-5243 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-5243 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2020-5243 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-cmcx-xhr8-3w9p · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-5243 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-5243 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-5243 · Security Note
• https://github.com/ua-parser/uap-ruby/security/advisories/GHSA-pcqq-5962-hvcw · Note
• https://t.me/cvenotify/1128 · Telegram Post