An integer overflow vulnerability exists with the length of websocket frames received via a websocket connection. An attacker would use this flaw to cause a denial of service attack on an HTTP Server allowing websocket connections.

vendor_unpatched cve-2020-27813: Unpatched CVEs for Ubuntu Linux (cve-2020-27813)

The remote Ubuntu 16.04 ESM / 18.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-6208-1 advisory.

    It was discovered that Gorilla WebSocket incorrectly handled decoding WebSocket frames. An attacker could     possibly use this issue to cause a crash, resulting in a denial of service.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3420 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-3420-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                      Markus Koschany     May 14, 2023                                  https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : golang-websocket     Version        : 1.4.0-1+deb10u1     CVE ID         : CVE-2020-27813

    An integer overflow vulnerability exists in golang-websocket, a Go package     implementing the WebSocket protocol connection. An attacker would use this flaw     to cause a denial of service attack on an HTTP Server allowing websocket     connections.

    The following reverse-dependencies have been rebuilt against the new golang-     websocket version: hugo and gitlab-workhorse

    For Debian 10 buster, this problem has been fixed in version     1.4.0-1+deb10u1.

    We recommend that you upgrade your golang-websocket packages.

    For the detailed security status of golang-websocket please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/golang-websocket

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: This is a digitally signed message part

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2021:0833 advisory.

    Red Hat OpenShift Container Platform is Red Hat's cloud computing     Kubernetes application platform solution designed for on-premise or private     cloud deployments.

    This advisory contains the RPM packages for Red Hat OpenShift Container     Platform 3.11.404. See the following advisory for the container images for     this release:

    https://access.redhat.com/errata/RHBA-2021:0832

    This release fixes the following bugs:

    * Previously, node upgrade playbooks scoped all nodes instead of just the nodes that are filtered by the     `openshift_upgrade_nodes_label`. As a result, nodes that were not intended to be upgraded had yum     excluders disabled but not reenabled. With this release, the initialization of the variable for filtering     nodes to upgrade is moved to earlier in the play, and  preconfiguration is scoped to the filtered list of     nodes. As a result, only the nodes that are intended for upgrade have yum excluders disabled. (BZ#1917013)

    * Previously, node-based facts, such as `l_kubelet_node_name`, were set late in the upgrade cycle, causing     the fact to be undefined when referenced. With this release, node-based fact initialization happens     earlier in the upgrade cycle so that facts are set prior to being referenced. (BZ#1933090)

    * Previously, a bug fix in Ansible 2.9.10 changed the behavior of `delegate_to` for plays using     `connection: local` with `hosts: localhost`. This change caused tasks that are intended for remote hosts     to be executed locally. With this release, `connection: local` is removed for the affected play, and tasks     intended for remote hosts are executed on the remote host.  (BZ#1934136)

    Security Fix(es):

    * golang-github-gorilla-websocket: integer overflow leads to denial of service (CVE-2020-27813)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

There was an integer overflow vulnerability concerning the length of websocket frames received via a websocket connection. An attacker could use this flaw to cause a denial of service attack on an HTTP Server allowing websocket connections.

For Debian 9 stretch, this problem has been fixed in version 1.1.0-1+deb9u1.

We recommend that you upgrade your golang-websocket packages.

For the detailed security status of golang-websocket please refer to its security tracker page at:
https://security-tracker.debian.org/tracker/golang-websocket

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
178105	Ubuntu 16.04 ESM / 18.04 ESM : Gorilla WebSocket vulnerability (USN-6208-1)	Nessus	Ubuntu Local Security Checks	high
175665	Debian dla-3420 : golang-github-gorilla-websocket-dev - security update	Nessus	Debian Local Security Checks	high
148117	RHEL 7 : OpenShift Container Platform 3.11.404 (RHSA-2021:0833)	Nessus	Red Hat Local Security Checks	high
144825	Debian DLA-2520-1 : golang-websocket security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2020-27813

high

Tenable Plugins

Coming Soon

high

high

high

high