CVE-2020-10719
Summary
| CVE | CVE-2020-10719 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2020-05-26 16:15:00 UTC |
| Updated | 2023-11-07 03:14:00 UTC |
| Description | A flaw was found in Undertow in versions before 2.1.1.Final, regarding the processing of invalid HTTP requests with large chunk sizes. This flaw allows an attacker to take advantage of HTTP request smuggling. |
Risk And Classification
Problem Types: CWE-444
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Netapp | Active Iq Unified Manager | - | All | All | All |
| Application | Netapp | Active Iq Unified Manager | - | All | All | All |
| Application | Netapp | Active Iq Unified Manager | - | All | All | All |
| Application | Netapp | Oncommand Insight | All | All | All | All |
| Application | Netapp | Oncommand Workflow Automation | - | All | All | All |
| Operating System | Redhat | Enterprise Linux | 6.0 | All | All | All |
| Operating System | Redhat | Enterprise Linux | 7.0 | All | All | All |
| Operating System | Redhat | Enterprise Linux | 8.0 | All | All | All |
| Application | Redhat | Fuse | 1.0 | All | All | All |
| Application | Redhat | Jboss Enterprise Application Platform | - | All | All | All |
| Application | Redhat | Jboss Enterprise Application Platform | 7.2 | All | All | All |
| Application | Redhat | Jboss Enterprise Application Platform | 7.3 | All | All | All |
| Application | Redhat | Jboss Enterprise Application Platform | 7.4 | All | All | All |
| Application | Redhat | Openshift Application Runtimes | - | All | All | All |
| Application | Redhat | Single Sign-on | - | All | All | All |
| Application | Redhat | Undertow | All | All | All | All |
| Application | Redhat | Undertow | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| February 2022 Undertow Vulnerabilities in NetApp Products | NetApp Product Security | CONFIRM | security.netapp.com | |
| 1828459 – (CVE-2020-10719) CVE-2020-10719 undertow: invalid HTTP request with large chunk size | CONFIRM | bugzilla.redhat.com | Issue Tracking, Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 982230 Java (maven) Security Update for io.undertow:undertow-core (GHSA-cccf-7xw3-p2vr)