PT-2022-20565 · Node.Js+1 · Undici+1

Arkadiy Tetelman + 1 · Published 2022-07-19 · Updated 2024-06-15 · CVE-2022-31150

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions undici versions less than 5.7.1

Description The issue allows injecting CRLF sequences into request headers in undici, an HTTP/1.1 client for Node.js. This can be achieved by manipulating the headers, path, and method parameters. Sanitizing all HTTP headers from untrusted sources to eliminate r is a potential workaround. A fix was released in version 5.8.0.

Recommendations For versions less than 5.7.1, update to version 5.8.0 to resolve the issue. As a temporary workaround, consider sanitizing all HTTP headers from untrusted sources to eliminate r until a patch is applied.

Exploit

Fix

Weakness Enumeration

CWE-93

Related Identifiers

CVE-2022-31150

GHSA-3CVR-822R-RQCC

OPENSUSE-SU-2022_3250-1

OPENSUSE-SU-2022_3251-1

OPENSUSE-SU-2024:12285-1

SUSE-SU-2022:3196-1

SUSE-SU-2022:3250-1

SUSE-SU-2022:3251-1

Affected Products

Suse

Undici

References · 32

• 🔥 https://github.com/nodejs/undici/security/advisories/GHSA-3cvr-822r-rqcc · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/31xxx/CVE-2022-31150.json · Exploit
• 🔥 https://hackerone.com/reports/409943 · Exploit
• https://security-tracker.debian.org/tracker/CVE-2022-31150 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-31150 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-31150 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2022:3250-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-31150 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2022:3196-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-31150 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-31150 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-3cvr-822r-rqcc · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-31150 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:3251-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:12285-1 · Vendor Advisory