-
Notifications
You must be signed in to change notification settings - Fork 283
Closed
Labels
MediumBounty entry rated as MediumBounty entry rated as MediumReviewed by the Lab 🧪GH Security Lab has rate the contributionGH Security Lab has rate the contributionThe Bug SlayerSubmissions to The Bug Slayer bountySubmissions to The Bug Slayer bounty
Description
CVE ID(s)
- CVE-2019-17513 - Ratpack
- CVE-2019-16771 - line/armeria
- Two more to come soon...
I also updated the netty documentation to call this out more explicitly to developers in the future:
netty/netty#9646
Report
Query: github/codeql#2192
This query detects uses of new DefaultHttpHeaders(false) which disables the internal CRLF injection checks of netty leaving the library vulnerable to CWE-113: Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
I actually didn't end up using this query to find CVE-2019-17513 or CVE-2019-16771, instead, I found them using the fuzzy search built into GitHub. I do, however, hope that this query will prevent this vulnerability from appearing in the future.
- Are you planning to discuss this vulnerability submission publicly? (Blog Post, social networks, etc). We would love to have you spread the word about the good work you are doing
Metadata
Metadata
Assignees
Labels
MediumBounty entry rated as MediumBounty entry rated as MediumReviewed by the Lab 🧪GH Security Lab has rate the contributionGH Security Lab has rate the contributionThe Bug SlayerSubmissions to The Bug Slayer bountySubmissions to The Bug Slayer bounty