PT-2024-7296 · Spring+1 · Spring-Web+1

Seokchan Yoon · Published 2024-08-14 · Updated 2024-09-30 · CVE-2024-38809

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions: org.springframework:spring-web versions 5.3.0 through 5.3.37 org.springframework:spring-web versions 6.0.0 through 6.0.22 org.springframework:spring-web versions 6.1.0 through 6.1.11

Description: Applications that parse ETags from If-Match or If-None-Match request headers are vulnerable to a denial-of-service (DoS) attack. The issue is related to errors in resource release.

Recommendations: For versions 5.3.x, upgrade to version 5.3.38. For versions 6.0.x, upgrade to version 6.0.23. For versions 6.1.x, upgrade to version 6.1.12. For older, unsupported versions, enforce a size limit on If-Match and If-None-Match headers, e.g., through a Filter.

Fix

DoS

Improper Resource Release

Resource Exhaustion

Weakness Enumeration

CWE-404

CWE-1333

CWE-400

Related Identifiers

BDU:2024-08650

CVE-2024-38809

GHSA-2RMJ-MQ67-H97G

Affected Products

Debian

Spring-Web

References · 22

• https://osv.dev/vulnerability/CVE-2024-38809 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-38809 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-38809 · Security Note
• https://bdu.fstec.ru/vul/2024-08650 · Security Note
• https://ubuntu.com/security/CVE-2024-38809 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-38809 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2024-38809 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-38809 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-2rmj-mq67-h97g · Vendor Advisory
• https://github.com/spring-projects/spring-framework · Note
• https://github.com/spring-projects/spring-framework/commit/8d16a50907c11f7e6b407d878a26e84eba08a533 · Note
• https://github.com/spring-projects/spring-framework/commit/bb17ad8314b81850a939fd265fb53b3361705e85 · Note
• https://github.com/spring-projects/spring-framework/issues/33372 · Note
• https://github.com/spring-projects/spring-framework/commit/582bfccbb72e5c8959a0b472d1dc7d03a20520f3 · Note
• https://access.redhat.com/security/cve/cve-2024-38809 · Note