CVE-2018-1312

critical · 9.8

In Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the nonce sent to prevent reply attacks was not correctly generated using a pseudo-random seed. In a cluster of servers using a common Digest authentication configuration, HTTP requests could be replayed across servers by an attacker without detection.

9.8

CVSS

15.8%

EPSS (exploit prob.)

97th

EPSS percentile

2018-03-26

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-287

Affected products

Vendor	Product	Affected versions
apache	http_server	2.4.1
apache	http_server	2.4.2
apache	http_server	2.4.3
apache	http_server	2.4.4
apache	http_server	2.4.6
apache	http_server	2.4.7
apache	http_server	2.4.9
apache	http_server	2.4.10
apache	http_server	2.4.12
apache	http_server	2.4.16
apache	http_server	2.4.17
apache	http_server	2.4.18
apache	http_server	2.4.20
apache	http_server	2.4.23
apache	http_server	2.4.25
apache	http_server	2.4.26
apache	http_server	2.4.27
apache	http_server	2.4.28
apache	http_server	2.4.29
canonical	ubuntu_linux	12.04
canonical	ubuntu_linux	14.04
canonical	ubuntu_linux	16.04
canonical	ubuntu_linux	17.10
canonical	ubuntu_linux	18.04
debian	debian_linux	7.0
debian	debian_linux	8.0
debian	debian_linux	9.0
netapp	cloud_backup	all versions
netapp	storagegrid	all versions
netapp	clustered_data_ontap	all versions
redhat	jboss_core_services	1.0
redhat	enterprise_linux	6.0
redhat	enterprise_linux	7.0
redhat	enterprise_linux_desktop	7.0
redhat	enterprise_linux_eus	7.6
redhat	enterprise_linux_server	7.0
redhat	enterprise_linux_server_aus	7.6
redhat	enterprise_linux_server_tus	7.6
redhat	enterprise_linux_workstation	7.0

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2018-1312