Denial of service in Confluence Data Center and Server

1) Resource management error

EUVDB-ID: #VU81102

Risk: Medium

CVSSv3.1: 6.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-22512

CWE-ID: CWE-399 - Resource Management Errors

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to improper management of internal resources within the application. A remote non-authenticated attacker can pass specially crafted data to the application and perform a denial of service (DoS) attack.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

Confluence Data Center: 5.6.1 - 8.5.0

CPE2.3

• cpe:2.3:a:atlassian:confluence_data_center:8.5.0:*:*:*:*:*:*:*
• cpe:2.3:a:atlassian:confluence_data_center:8.4.2:*:*:*:*:*:*:*
• cpe:2.3:a:atlassian:confluence_data_center:8.3.2:*:*:*:*:*:*:*
• cpe:2.3:a:atlassian:confluence_data_center:8.2.3:*:*:*:*:*:*:*
• cpe:2.3:a:atlassian:confluence_data_center:8.1.3:*:*:*:*:*:*:*
• cpe:2.3:a:atlassian:confluence_data_center:8.0.4:*:*:*:*:*:*:*
• cpe:2.3:a:atlassian:confluence_data_center:7.19.12:*:*:*:*:*:*:*
• cpe:2.3:a:atlassian:confluence_data_center:7.13.20:*:*:*:*:*:*:*
• cpe:2.3:a:atlassian:confluence_data_center:7.20.3:*:*:*:*:*:*:*
• cpe:2.3:a:atlassian:confluence_data_center:7.18.3:*:*:*:*:*:*:*
• cpe:2.3:a:atlassian:confluence_data_center:7.17.5:*:*:*:*:*:*:*
• cpe:2.3:a:atlassian:confluence_data_center:7.16.5:*:*:*:*:*:*:*
• cpe:2.3:a:atlassian:confluence_data_center:7.15.3:*:*:*:*:*:*:*
• cpe:2.3:a:atlassian:confluence_data_center:7.14.4:*:*:*:*:*:*:*
• cpe:2.3:a:atlassian:confluence_data_center:7.12.5:*:*:*:*:*:*:*
• cpe:2.3:a:atlassian:confluence_data_center:7.11.6:*:*:*:*:*:*:*
• cpe:2.3:a:atlassian:confluence_data_center:7.10.2:*:*:*:*:*:*:*
• cpe:2.3:a:atlassian:confluence_data_center:7.9.3:*:*:*:*:*:*:*
• cpe:2.3:a:atlassian:confluence_data_center:7.8.3:*:*:*:*:*:*:*
• cpe:2.3:a:atlassian:confluence_data_center:7.7.4:*:*:*:*:*:*:*
• cpe:2.3:a:atlassian:confluence_data_center:7.6.3:*:*:*:*:*:*:*
• cpe:2.3:a:atlassian:confluence_data_center:7.5.2:*:*:*:*:*:*:*
• cpe:2.3:a:atlassian:confluence_data_center:7.4.18:*:*:*:*:*:*:*
• cpe:2.3:a:atlassian:confluence_data_center:7.3.5:*:*:*:*:*:*:*
• cpe:2.3:a:atlassian:confluence_data_center:7.2.2:*:*:*:*:*:*:*
• cpe:2.3:a:atlassian:confluence_data_center:7.1.2:*:*:*:*:*:*:*
• cpe:2.3:a:atlassian:confluence_data_center:7.0.5:*:*:*:*:*:*:*
• cpe:2.3:a:atlassian:confluence_data_center:6.15.10:*:*:*:*:*:*:*
• cpe:2.3:a:atlassian:confluence_data_center:6.14.3:*:*:*:*:*:*:*
• cpe:2.3:a:atlassian:confluence_data_center:6.13.23:*:*:*:*:*:*:*
• cpe:2.3:a:atlassian:confluence_data_center:6.12.4:*:*:*:*:*:*:*
• cpe:2.3:a:atlassian:confluence_data_center:6.11.2:*:*:*:*:*:*:*
• cpe:2.3:a:atlassian:confluence_data_center:6.10.3:*:*:*:*:*:*:*
• cpe:2.3:a:atlassian:confluence_data_center:6.9.3:*:*:*:*:*:*:*
• cpe:2.3:a:atlassian:confluence_data_center:6.8.5:*:*:*:*:*:*:*
• cpe:2.3:a:atlassian:confluence_data_center:6.7.3:*:*:*:*:*:*:*
• cpe:2.3:a:atlassian:confluence_data_center:6.6.17:*:*:*:*:*:*:*
• cpe:2.3:a:atlassian:confluence_data_center:6.5.3:*:*:*:*:*:*:*
• cpe:2.3:a:atlassian:confluence_data_center:6.4.3:*:*:*:*:*:*:*
• cpe:2.3:a:atlassian:confluence_data_center:6.3.4:*:*:*:*:*:*:*
• cpe:2.3:a:atlassian:confluence_data_center:6.2.4:*:*:*:*:*:*:*
• cpe:2.3:a:atlassian:confluence_data_center:6.1.4:*:*:*:*:*:*:*
• cpe:2.3:a:atlassian:confluence_data_center:6.0.7:*:*:*:*:*:*:*
• cpe:2.3:a:atlassian:confluence_data_center:5.10.9:*:*:*:*:*:*:*
• cpe:2.3:a:atlassian:confluence_data_center:5.9.14:*:*:*:*:*:*:*
• cpe:2.3:a:atlassian:confluence_data_center:5.8.18:*:*:*:*:*:*:*
• cpe:2.3:a:atlassian:confluence_data_center:5.7.6:*:*:*:*:*:*:*
• cpe:2.3:a:atlassian:confluence_data_center:5.6.6:*:*:*:*:*:*:*

External links

http://jira.atlassian.com/browse/CONFSERVER-91258

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.