Critical Vulnerability in Apache2: Digest Authentication Nonce Generation Flaw
Summary
ALPINE-CVE-2018-1312: In Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the nonce sent to prevent reply attacks was not correctly generated using a pseudo-random seed. Affects apache2 versions < 2.4.33-r0. Fixed in 2.4.33-r0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Apache HTTP Server, commonly referred to as Apache2, is a widely used open-source web server software that enables the hosting of websites and web applications. It is known for its flexibility, power, and extensive feature set, including support for various protocols and authentication methods. However, a significant vulnerability has been identified in versions 2.2.0 to 2.4.29, which affects the security of HTTP Digest authentication, potentially allowing attackers to exploit nonce generation flaws.
Vulnerability Detail
The vulnerability arises from the improper generation of nonces used in HTTP Digest authentication challenges. Specifically, the nonce was not generated using a secure pseudo-random seed, which could allow an attacker to replay HTTP requests across a cluster of servers sharing the same authentication configuration. This flaw could lead to unauthorized access and data breaches, as attackers could impersonate legitimate users without detection.
How To Fix
Minimum fixed version
2.4.33-r0
This is the first release that contains the fix.
sudo apk add --upgrade apache2Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, consider disabling HTTP Digest authentication until the package is updated. This can be done by modifying the server configuration to use a different authentication method, such as Basic authentication, which does not rely on the flawed nonce generation.
Conclusion
The vulnerability in Apache2 regarding the improper nonce generation in HTTP Digest authentication poses a significant risk to web applications. It is crucial for users to update to the patched version 2.4.33-r0 to mitigate this risk. Additionally, utilizing tools like Vulert can help in monitoring and managing vulnerabilities effectively.
See every vulnerability recorded for apache2 →
FAQ
The CVSS score of this vulnerability is 9.8, indicating a critical level of severity.
The affected versions are Apache2 versions 2.2.0 to 2.4.29.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If exploited, this vulnerability could allow attackers to replay authentication requests, potentially leading to unauthorized access to sensitive data and systems.
Yes, Vulert provides a service that monitors and alerts for open-source vulnerabilities in your software using just a manifest file like package-lock.json.
References
Related vulnerabilities
Recent vulnerabilities recorded for apache2.
