SB2017031002 - Multiple vulnerabilities in Red Hat Keycloak

Description

This security bulletin contains information about 2 secuirty vulnerabilities.

1) Information disclosure (CVE-ID: CVE-2017-2582)

The vulnerability allows a remote attacker to obtain potentially sensitive information.

The vulnerability exists in the StaxParserUtil class of the Picketlink feature due to improper parsing of Security Assertion Markup Language (SAML) messages. A remote attacker can send a specially crafted SAML request that submits malicious input and access sensitive information, such as values of system properties.

2) Infinite loop (CVE-ID: CVE-2017-2646)

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The vulnerability existsdue to improper processing of logout requests that contain an extension element. A remote attacker can send a specially crafted logout request that submits malicious input, make the SAMLSloRequestParser.parse() method end in an infinite loop and cause the service to crash.

Remediation

Install update from vendor's website.

References

• https://github.com/keycloak/keycloak/pull/3715/commits/0cb5ba0f6e83162d221681f47b470c3042eef237
• https://access.redhat.com/security/cve/cve-2017-2646