Inconsistent interpretation of HTTP requests in Twisted Web - CVE-2020-10109

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU26356

Inconsistent interpretation of HTTP requests in Twisted Web - CVE-2020-10109

Published: March 24, 2020


Vulnerability identifier: #VU26356
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-10109
CWE-ID: CWE-444
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to perform HTTP request smuggling attack.

The vulnerability exists due to insufficient input validation when processing Content-length and a Chunked encoding header, sent within one HTTP request. The Content-length header took precedence and the remainder of the request body was interpreted as a pipelined request. A remote attacker can send a specially crafted HTTP request to the affected web server and poison HTTP cache or perform other attacks against web application.


Affected software

Twisted Web
Gentoo Linux
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
CentOS
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Server
SUSE Enterprise Storage
SUSE Linux Enterprise Storage
Fedora
HPE Helion Openstack
SUSE OpenStack Cloud
SUSE OpenStack Cloud Crowbar
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Module for Web Scripting
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Module for Server Applications
openSUSE Leap
Synapse
SUSE Linux Enterprise Module for Packagehub Subpackages
py3-twisted (Alpine package)
python-twisted-web (Red Hat package)
python-Twisted
python-Twisted-debuginfo
python-Twisted-debugsource
python-twisted
python3-Twisted-debuginfo
python3-Twisted
python2-Twisted-debuginfo
python2-Twisted
python-Twisted-doc

How to mitigate CVE-2020-10109

Install updates from vendor's website.

Twisted Web - update to 20.3.0
Synapse - update to 1.12.0
py3-twisted (Alpine package) - update to 20.3.0-r0
python-twisted-web (Red Hat package) - update to 12.1.0-7.el7_8
python-Twisted - update to 15.2.1-9.20.1
python-Twisted-debuginfo - addressed in versions 15.2.1-9.20.1, 19.10.0-150200.3.15.1
python-Twisted-debugsource - addressed in versions 15.2.1-9.20.1, 19.10.0-150200.3.15.1
python-twisted - addressed in versions 19.2.1-6.fc31, 19.10.0-2.el8, 19.10.0-2.fc32
python3-Twisted-debuginfo - update to 19.10.0-150200.3.15.1
python3-Twisted - update to 19.10.0-150200.3.15.1
python2-Twisted-debuginfo - update to 19.10.0-150200.3.15.1
python2-Twisted - update to 19.10.0-150200.3.15.1
python-Twisted-doc - update to 19.10.0-150200.3.15.1

External References

Related Security Bulletins