Strix
26.1K

CVE-2017-7657

CRITICALCVSS 9.8/10EPSS 16.15%

Last modified

CVE-2017-7657 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), transfer-encoding chunks are handled poorly. The chunk length parsing was vulnerable to an integer overflow. EPSS estimates a 16.15% chance of exploitation in the next 30 days.

Description

In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), transfer-encoding chunks are handled poorly. The chunk length parsing was vulnerable to an integer overflow. Thus a large chunk size could be interpreted as a smaller chunk size and content sent as chunk body could be interpreted as a pipelined request. If Jetty was deployed behind an intermediary that imposed some authorization and that intermediary allowed arbitrarily large chunks to be passed on unchanged, then this flaw could be used to bypass the authorization imposed by the intermediary as the fake pipelined request would not be interpreted by the intermediary as a request.

Metrics

CVSS 3.1
9.8/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Probability
16.15%

96.5th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
EclipseJetty<= 9.2.26
EclipseJetty>= 9.3.0, < 9.3.24
EclipseJetty>= 9.4.0, < 9.4.11
DebianDebian Linux9.0
NetappE-Series Santricity ManagementAll versions
NetappE-Series Santricity Os Controller>= 11.0, <= 11.50.1
NetappE-Series Santricity Web ServicesAll versions
NetappElement SoftwareAll versions
NetappElement Software Management NodeAll versions
NetappHci Storage NodesAll versions
NetappOncommand System Manager3.x
NetappOncommand Unified Manager< 5.2.4
NetappSantricity Cloud ConnectorAll versions
NetappSnap Creator Framework< 4.3.3
NetappSnapcenter< 4.1p3
NetappSnapmanager< 3.4.2
HpXp P9000 Command View>= 8.4.0-00, < 8.6.2-00
OracleRest Data Services11.2.0.4
OracleRest Data Services12.1.0.2
OracleRest Data Services12.2.0.1
OracleRest Data Services18c
OracleRetail Xstore Point Of Service7.1
OracleRetail Xstore Point Of Service15.0
OracleRetail Xstore Point Of Service16.0
OracleRetail Xstore Point Of Service17.0

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2017-7657?
In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), transfer-encoding chunks are handled poorly. The chunk length parsing was vulnerable to an integer overflow. Thus a large chunk size could be interpreted as a smaller chunk size and content sent as chunk body could be interpreted as a pipelined request. If Jetty was deployed behind an intermediary that imposed some authorization and that intermediary allowed arbitrarily large chunks to be passed on unchanged, then this flaw could be used to bypass the authorization imposed by the intermediary as the fake pipelined request would not be interpreted by the intermediary as a request.
How severe is CVE-2017-7657?
CVE-2017-7657 has a CVSS score of 9.8/10 (CRITICAL severity). The EPSS model estimates a 16.15% probability of exploitation in the next 30 days.
How do I fix CVE-2017-7657?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2017-7657?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST