SB2018052906 - Multiple vulnerabilities in Apache Nifi
Published: May 29, 2018
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 4 secuirty vulnerabilities.
1) Deserialization of untrusted data (CVE-ID: CVE-2018-1310)
The vulnerability allows a remote attacker to cause DoS condition on the target system.
The vulnerability exists due to unsafe deserialization of Java Message Service (JMS) content by an ActiveMQ client affected by the vulnerability identified as CVE-2015-5254. A remote attacker can send a specially crafted request that submits malicious JMS content and cause the affected software to become unresponsive or crash, resulting in a DoS condition.
2) XXE attack (CVE-ID: CVE-2018-1309)
The vulnerability allows a remote attacker to conduct XXE-attack on the target system.
The vulnerability exists due to improper parsing of XML content by the SplitXML processor. A remote attacker can send a specially crafted request that submits malicious XML content to the targeted system and execute arbitrary code or access sensitive information on the system, which could be used to conduct further attacks.
3) Authentication bypass (CVE-ID: CVE-2017-8028)
The vulnerability allows a remote attacker to bypass authentication on the target system.The weakness exists due to some LDAP vendors require an explicit operation for the LDAP bind to take effect. A remote attacker with knowledge of the username can authenticate with an arbitrary password when connected to some LDAP servers, when no additional attributes are bound, and when using LDAP BindAuthenticator with org.springframework.ldap.core.support.DefaultTlsDirContextAuthenticationStrategy as the authentication strategy, and setting userSearch.
4) Infinite loop (CVE-ID: CVE-2018-1324)
The vulnerability allows a remote attacker to cause DoS condition on the target system.The weakness exists due to an error the ZipFile and ZipArchiveInputStream classes when handling malicious input. A remote attacker can send a specially crafted ZIP archive, trigger an infinite loop and cause the service to crash.
Remediation
Install update from vendor's website.