Incorrect parsing in url-parse <1.4.3 returns wrong hostname which leads to multiple vulnerabilities such as SSRF, Open Redirect, Bypass Authentication Protocol.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Incorrect parsing in url-parse <1.4.3 returns wrong hostname which leads to multiple vulnerabilities such
    as SSRF, Open Redirect, Bypass Authentication Protocol. (CVE-2018-3774)

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5973-1 advisory.

    It was discovered that url-parse incorrectly handled certain inputs. If a user or an automated system were     tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to     cause a denial of service, or to perform a server-side request forgery attack or open redirect attack.
    (CVE-2018-3774)

    It was discovered that url-parse incorrectly handled certain inputs. If a user or an automated system were     tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to     bypass input validation. This issue was only fixed in Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.
    (CVE-2020-8124)

    Yaniv Nizry discovered that url-parse incorrectly handled certain inputs. If a user or an automated system     were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue     to cause a denial of service, or to perform a server-side request forgery attack or open redirect attack.
    This issue was only fixed in Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2021-27515)

    It was discovered that url-parse incorrectly handled certain inputs. If a user or an automated system were     tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to     cause a denial of service, or to perform a server-side request forgery attack or open redirect attack.
    This issue was only fixed in Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2021-3664)

    It was discovered that url-parse incorrectly handled certain inputs. If a user or an automated system were     tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to     bypass authorization. This issue was only fixed in Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2022-0512,     CVE-2022-0639, CVE-2022-0691)

    Rohan Sharma discovered that url-parse incorrectly handled certain inputs. If a user or an automated     system were tricked into opening a specially crafted input file, a remote attacker could possibly use this     issue to bypass authorization. This issue was only fixed in Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.
    (CVE-2022-0686)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
421860	SCA: security update for url-parse (GHSA-pv4c-p2j5-38j4)	Tenable Cloud Security	SCA Checks	critical
421860	SCA: security update for url-parse (GHSA-pv4c-p2j5-38j4)	Tenable Self-Hosted Container Security	SCA Checks	critical
173433	Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : url-parse vulnerabilities (USN-5973-1)	Nessus	Ubuntu Local Security Checks	critical

Detections

Analytics

CVE-2018-3774

critical

Tenable Plugins

critical

critical

critical