Lucene search

DellCVE-2018-15756

HistoryOct 18, 2018 - 10:29 p.m.

CVE-2018-15756

2018-10-1822:29:00

dell

web.nvd.nist.gov

143

spring framework

cve

2018

15756

denial of service

vulnerability

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.1

Confidence

High

EPSS

0.004

Percentile

75.2%

JSON

Spring Framework, version 5.1, versions 5.0.x prior to 5.0.10, versions 4.3.x prior to 4.3.20, and older unsupported versions on the 4.2.x branch provide support for range requests when serving static resources through the ResourceHttpRequestHandler, or starting in 5.0 when an annotated controller returns an org.springframework.core.io.Resource. A malicious user (or attacker) can add a range header with a high number of ranges, or with wide ranges that overlap, or both, for a denial of service attack. This vulnerability affects applications that depend on either spring-webmvc or spring-webflux. Such applications must also have a registration for serving static resources (e.g. JS, CSS, images, and others), or have an annotated controller that returns an org.springframework.core.io.Resource. Spring Boot applications that depend on spring-boot-starter-web or spring-boot-starter-webflux are ready to serve static resources out of the box and are therefore vulnerable.

Affected configurations

Nvd

Vulners

Node

vmwarespring_frameworkRange4.2.0–4.3.20

vmwarespring_frameworkRange5.0.0–5.0.10

vmwarespring_frameworkMatch5.1.0

Node

oracleagile_plmMatch9.3.3

oracleagile_plmMatch9.3.4

oracleagile_plmMatch9.3.5

oracleagile_plmMatch9.3.6

oraclecommunications_brm_-_elastic_charging_engineMatch11.3

oraclecommunications_brm_-_elastic_charging_engineMatch12.0

oraclecommunications_converged_application_server_-_service_controllerMatch6.0

oraclecommunications_converged_application_server_-_service_controllerMatch6.1

oraclecommunications_diameter_signaling_routerMatch8.0.0

oraclecommunications_diameter_signaling_routerMatch8.1

oraclecommunications_diameter_signaling_routerMatch8.2

oraclecommunications_diameter_signaling_routerMatch8.2.1

oraclecommunications_element_managerMatch8.1.1

oraclecommunications_element_managerMatch8.2.0

oraclecommunications_element_managerMatch8.2.1

oraclecommunications_online_mediation_controllerMatch6.1

oraclecommunications_session_report_managerMatch8.0.0

oraclecommunications_session_report_managerMatch8.1.0

oraclecommunications_session_report_managerMatch8.1.1

oraclecommunications_session_report_managerMatch8.2.0

oraclecommunications_session_report_managerMatch8.2.1

oraclecommunications_session_route_managerMatch8.0.0

oraclecommunications_session_route_managerMatch8.1.0

oraclecommunications_session_route_managerMatch8.1.1

oraclecommunications_session_route_managerMatch8.2.0

oraclecommunications_session_route_managerMatch8.2.1

oraclecommunications_unified_inventory_managementMatch7.3

oraclecommunications_unified_inventory_managementMatch7.4.0

oracleendeca_information_discovery_integratorMatch3.2.0

oracleenterprise_manager_for_fusion_applicationsMatch13.3.0.0

oracleenterprise_manager_ops_centerMatch12.3.3

oraclefinancial_services_analytical_applications_infrastructureRange8.0.2–8.0.8

oracleflexcube_private_bankingMatch12.0.1

oracleflexcube_private_bankingMatch12.0.3

oracleflexcube_private_bankingMatch12.1.0

oraclegoldengate_application_adaptersMatch12.3.2.1.0

oraclehealthcare_master_person_indexMatch3.0

oraclehealthcare_master_person_indexMatch4.0.2

oracleidentity_manager_connectorMatch9.0

oracleinsurance_calculation_engineMatch9.7

oracleinsurance_calculation_engineMatch10.0

oracleinsurance_calculation_engineMatch10.1

oracleinsurance_calculation_engineMatch10.2

oracleinsurance_policy_administration_j2eeMatch10.0

oracleinsurance_policy_administration_j2eeMatch10.1

oracleinsurance_policy_administration_j2eeMatch10.2

oracleinsurance_policy_administration_j2eeMatch10.2.0

oracleinsurance_policy_administration_j2eeMatch10.2.4

oracleinsurance_policy_administration_j2eeMatch11.0

oracleinsurance_policy_administration_j2eeMatch11.1.0

oracleinsurance_policy_administration_j2eeMatch11.2.0

oracleinsurance_rules_paletteMatch10.0

oracleinsurance_rules_paletteMatch10.1

oracleinsurance_rules_paletteMatch10.2

oracleinsurance_rules_paletteMatch10.2.0

oracleinsurance_rules_paletteMatch10.2.4

oracleinsurance_rules_paletteMatch11.0

oracleinsurance_rules_paletteMatch11.0.2

oracleinsurance_rules_paletteMatch11.1.0

oracleinsurance_rules_paletteMatch11.2.0

oraclemysql_enterprise_monitorRange≤4.0.12

oraclemysql_enterprise_monitorRange8.0.0–8.0.20

oracleprimavera_analyticsMatch18.8

oracleprimavera_gatewayMatch15.2

oracleprimavera_gatewayMatch16.2

oracleprimavera_gatewayMatch17.12

oracleprimavera_gatewayMatch18.8.0

oraclerapid_planningMatch12.1

oraclerapid_planningMatch12.2

oracleretail_advanced_inventory_planningMatch15.0

oracleretail_assortment_planningMatch15.0

oracleretail_assortment_planningMatch16.0

oracleretail_clearance_optimization_engineMatch14.0.5

oracleretail_financial_integrationMatch14.0

oracleretail_financial_integrationMatch14.1

oracleretail_financial_integrationMatch15.0

oracleretail_financial_integrationMatch16.0

oracleretail_integration_busMatch15.0

oracleretail_integration_busMatch15.0.3

oracleretail_integration_busMatch16.0

oracleretail_integration_busMatch16.0.3

oracleretail_invoice_matchingMatch12.0

oracleretail_invoice_matchingMatch13.0

oracleretail_invoice_matchingMatch13.1

oracleretail_invoice_matchingMatch13.2

oracleretail_invoice_matchingMatch14.0

oracleretail_invoice_matchingMatch14.1

oracleretail_markdown_optimizationMatch13.4.4

oracleretail_order_brokerMatch5.1

oracleretail_order_brokerMatch5.2

oracleretail_order_brokerMatch15.0

oracleretail_order_brokerMatch16.0

oracleretail_predictive_application_serverMatch14.0.3

oracleretail_predictive_application_serverMatch14.0.3.26

oracleretail_predictive_application_serverMatch14.1.3

oracleretail_predictive_application_serverMatch14.1.3.37

oracleretail_predictive_application_serverMatch15.0.3

oracleretail_predictive_application_serverMatch15.0.3.100

oracleretail_predictive_application_serverMatch16.0

oracleretail_predictive_application_serverMatch16.0.3

oracleretail_service_backboneMatch15.0

oracleretail_service_backboneMatch16.0

oracleretail_service_backboneMatch16.0.1

oracleretail_xstore_point_of_serviceMatch7.1

oracletape_library_acslsMatch8.5

oraclewebcenter_sitesMatch12.2.1.3.0

oracleweblogic_serverMatch10.3.6.0.0

oracleweblogic_serverMatch12.1.3.0.0

oracleweblogic_serverMatch12.2.1.3.0

oracleweblogic_serverMatch12.2.1.4.0

Node

debiandebian_linuxMatch9.0

VendorProductVersionCPE
vmwarespring_framework*cpe:2.3:a:vmware:spring_framework:*:*:*:*:*:*:*:*
vmwarespring_framework5.1.0cpe:2.3:a:vmware:spring_framework:5.1.0:*:*:*:*:*:*:*
oracleagile_plm9.3.3cpe:2.3:a:oracle:agile_plm:9.3.3:*:*:*:*:*:*:*
oracleagile_plm9.3.4cpe:2.3:a:oracle:agile_plm:9.3.4:*:*:*:*:*:*:*
oracleagile_plm9.3.5cpe:2.3:a:oracle:agile_plm:9.3.5:*:*:*:*:*:*:*
oracleagile_plm9.3.6cpe:2.3:a:oracle:agile_plm:9.3.6:*:*:*:*:*:*:*
oraclecommunications_brm_-_elastic_charging_engine11.3cpe:2.3:a:oracle:communications_brm_-_elastic_charging_engine:11.3:*:*:*:*:*:*:*
oraclecommunications_brm_-_elastic_charging_engine12.0cpe:2.3:a:oracle:communications_brm_-_elastic_charging_engine:12.0:*:*:*:*:*:*:*
oraclecommunications_converged_application_server_-_service_controller6.0cpe:2.3:a:oracle:communications_converged_application_server_-_service_controller:6.0:*:*:*:*:*:*:*
oraclecommunications_converged_application_server_-_service_controller6.1cpe:2.3:a:oracle:communications_converged_application_server_-_service_controller:6.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
vmware	spring_framework	*	cpe:2.3:a:vmware:spring_framework::::::::
vmware	spring_framework	5.1.0	cpe:2.3:a:vmware:spring_framework:5.1.0:::::::*
oracle	agile_plm	9.3.3	cpe:2.3:a:oracle:agile_plm:9.3.3:::::::*
oracle	agile_plm	9.3.4	cpe:2.3:a:oracle:agile_plm:9.3.4:::::::*
oracle	agile_plm	9.3.5	cpe:2.3:a:oracle:agile_plm:9.3.5:::::::*
oracle	agile_plm	9.3.6	cpe:2.3:a:oracle:agile_plm:9.3.6:::::::*
oracle	communications_brm_-_elastic_charging_engine	11.3	cpe:2.3:a:oracle:communications_brm_-_elastic_charging_engine:11.3:::::::*
oracle	communications_brm_-_elastic_charging_engine	12.0	cpe:2.3:a:oracle:communications_brm_-_elastic_charging_engine:12.0:::::::*
oracle	communications_converged_application_server_-_service_controller	6.0	cpe:2.3:a:oracle:communications_converged_application_server_-_service_controller:6.0:::::::*
oracle	communications_converged_application_server_-_service_controller	6.1	cpe:2.3:a:oracle:communications_converged_application_server_-_service_controller:6.1:::::::*

Rows per page:

1-10 of 1121

CNA Affected

[
  {
    "product": "Spring framework",
    "vendor": "Pivotal",
    "versions": [
      {
        "status": "affected",
        "version": "5.1"
      },
      {
        "lessThanOrEqual": "5.0.9",
        "status": "affected",
        "version": "5.0.0",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "4.3.19",
        "status": "affected",
        "version": "4.3",
        "versionType": "custom"
      }
    ]
  }
]

References

www.securityfocus.com/bid/105703

lists.apache.org/thread.html/339fd112517e4873695b5115b96acdddbfc8f83b10598528d37c7d12%40%3Cissues.activemq.apache.org%3E

lists.apache.org/thread.html/77886fec378ee6064debb1efb6b464a4a0173b2ff0d151ed86d3a228%40%3Cissues.activemq.apache.org%3E

lists.apache.org/thread.html/7b156ee50ba3ecce87b33c06bf7a749d84ffee55e69bfb5eca88fcc3%40%3Cissues.activemq.apache.org%3E

lists.apache.org/thread.html/8a1fe70534fc52ff5c9db5ac29c55657f802cbefd7e9d9850c7052bd%40%3Cissues.activemq.apache.org%3E

lists.apache.org/thread.html/a3071e11c6fbd593022074ec1b4693f6d948c2b02cfa4a5d854aed68%40%3Cissues.activemq.apache.org%3E

lists.apache.org/thread.html/bb354962cb51fff65740d5fb1bc2aac56af577c06244b57c36f98e4d%40%3Cissues.activemq.apache.org%3E

lists.apache.org/thread.html/d6a84f52db89804b0ad965f3ea2b24bb880edee29107a1c5069cc3dd%40%3Cissues.activemq.apache.org%3E

lists.apache.org/thread.html/efaa52b0aa67aae7cbd9e6ef96945387e422d7ce0e65434570a37b1d%40%3Cissues.activemq.apache.org%3E

lists.apache.org/thread.html/f8905507a2c94af6b08b72d7be0c4b8c6660e585f00abfafeccc86bc%40%3Cissues.activemq.apache.org%3E

lists.debian.org/debian-lts-announce/2021/04/msg00022.html

pivotal.io/security/cve-2018-15756

www.oracle.com//security-alerts/cpujul2021.html

www.oracle.com/security-alerts/cpuapr2020.html

www.oracle.com/security-alerts/cpujan2020.html

www.oracle.com/security-alerts/cpujan2021.html

www.oracle.com/security-alerts/cpujul2020.html

www.oracle.com/security-alerts/cpuoct2021.html

www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html

www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html

www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html

Social References

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.1

Confidence

High

EPSS

0.004

Percentile

75.2%

JSON

Related for CVE-2018-15756