Find, fix and prevent vulnerabilities in your code.

Overview

io.vertx:vertx-core is a tool-kit for building reactive applications on the JVM.

Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling during the TLS handshake process, where the SslContext cache can be forced to grow indefinitely. The SSLHelper, SslChannelProvider, and SslContextProvider classes responsible for this caching in different versions all exhibit the same vulnerable behavior. A malicious client can disrupt service by sending a large number of distinct valid SNI names. This is particularly likely when the server has a broad hostname rule such as a wildcard.

Remediation

Upgrade io.vertx:vertx-core to version 4.5.27, 5.0.12 or higher.

References

• GitHub Advisory
• GitHub PR
• GitLab Issue

Overview

io.vertx:vertx-core is a tool-kit for building reactive applications on the JVM.

Affected versions of this package are vulnerable to HTTP Request Smuggling due to improper handling of / in the output buffer by removeDots() function in Static Handler. An attacker can prevent access to static files by sending specifically crafted request URIs that exploit improper handling of encoded path traversal sequences.

Workaround

This vulnerability can be mitigated by disabling the Static Handler cache.

Remediation

Upgrade io.vertx:vertx-core to version 4.5.24 or higher.

References

• GitHub Commit
• GitHub PR