CVE-2018-19148

描述

Caddy through 0.11.0 sends incorrect certificates for certain invalid requests, making it easier for attackers to enumerate hostnames. Specifically, when unable to match a Host header with a vhost in its configuration, it serves the X.509 certificate for a randomly selected vhost in its configuration. Repeated requests (with a nonexistent hostname in the Host header) permit full enumeration of all certificates on the server. This generally permits an attacker to easily and accurately discover the existence of and relationships among hostnames that weren't meant to be public, though this information could likely have been discovered via other methods with additional effort.

如何修補 CVE-2018-19148

要修補 CVE-2018-19148,請將受影響套件升級到下列已修補版本。

• —升級至 0.11.1 或更新版本

CVE-2018-19148 正在被利用嗎?

低 — EPSS 為 0.9%,目前沒有觀察到大規模利用活動。

受影響套件(1)

• from 0, < 0.11.1

CVSS 分數

參考連結(8)

• ADVISORYnvd.nist.gov/vuln/detail/CVE-2018-19148
• PATCHgithub.com/caddyserver/caddy
• WEBgithub.com/caddyserver/caddy/commit/986d4ffe3de32dcb81d334d603a2f0f1d460eb2f
• WEBgithub.com/caddyserver/caddy/commit/f6e50890b3d81cb04146bd7b2c2b59e99830849a