¡¾Îó²îͨ¸æ¡¿Apache TomcatÐÅϢй¶Îó²î£¨CVE-2021-43980£©

Ðû²¼Ê±¼ä 2022-09-29
 

0x00 Îó²î¸ÅÊö

CVE   ID

CVE-2021-43980

·¢Ã÷ʱ¼ä

2022-09-29

Àà    ÐÍ

ÐÅϢй¶

µÈ    ¼¶

¸ßΣ

Ô¶³ÌʹÓÃ


Ó°Ïì¹æÄ£


¹¥»÷ÖØÆ¯ºó


Óû§½»»¥


PoC/EXP


ÔÚҰʹÓÃ


 

0x01 Îó²îÏêÇé

Apache TomcatÊÇÒ»¸öÊ¢ÐеĿªÔ´WebЧÀÍÆ÷ºÍJava´úÂëµÄServletÈÝÆ÷¡£¡£¡£¡£

9ÔÂ28ÈÕ£¬£¬£¬£¬£¬£¬£¬ApacheÐû²¼Ç徲ͨ¸æ£¬£¬£¬£¬£¬£¬£¬¹ûÕæÅû¶ÁËTomcatÖеÄÒ»¸öÐÅϢй¶Îó²î£¨CVE-2021-43980£©¡£¡£¡£¡£

ÓÉÓÚijЩTomcat°æ±¾ÖеÄÛÕ±Õʽ¶ÁдµÄ¼ò»¯ÊµÏÖµ¼Ö±£´æ²¢·¢¹ýʧ£¨¼«ÄÑ´¥·¢£©£¬£¬£¬£¬£¬£¬£¬¿ÉÄÜʹ¿Í»§¶ËÅþÁ¬¹²ÏíÒ»¸öHttp11ProcessorʵÀý£¬£¬£¬£¬£¬£¬£¬µ¼ÖÂÏìÓ¦»ò²¿·ÖÏìÓ¦±»¹ýʧµÄ¿Í»§¶ËÎüÊÕ£¬£¬£¬£¬£¬£¬£¬Ôì³ÉÐÅϢй¶¡£¡£¡£¡£

 

Ó°Ïì¹æÄ£

Apache Tomcat  10.1.0-M1 - 10.1.0-M12

Apache Tomcat  10.0.0-M1 - 10.0.18

Apache Tomcat  9.0.0-M1 - 9.0.60

Apache Tomcat  8.5.0 - 8.5.77

 

0x02 Çå¾²½¨Òé

ÏÖÔÚ¸ÃÎó²îÒѾ­ÐÞ¸´£¬£¬£¬£¬£¬£¬£¬ÊÜÓ°ÏìÓû§¿ÉÒÔÉý¼¶µ½ÒÔϰ汾£º

Apache Tomcat °æ±¾ >= 10.1.0-M14

Apache Tomcat °æ±¾ >= 10.0.20

Apache Tomcat °æ±¾ >= 9.0.62

Apache Tomcat °æ±¾ >= 8.5.78

×¢£º10.1.0-M13¡¢10.0.19ºÍ9.0.61δÐû²¼¡£¡£¡£¡£

ÏÂÔØÁ´½Ó£º

https://tomcat.apache.org/

 

0x03 ²Î¿¼Á´½Ó

https://www.mail-archive.com/announce@apache.org/msg07611.html

https://tomcat.apache.org/security-10.html

 

0x04 °æ±¾ÐÅÏ¢

°æ±¾

ÈÕÆÚ

ÐÞ¸ÄÄÚÈÝ

V1.0

2022-09-29

Ê×´ÎÐû²¼

 

 

0x05 ¸½Â¼

¼øºÚµ£±£Íø¼ò½é

¼øºÚµ£±£Íø½¨ÉèÓÚ1996Ä꣬£¬£¬£¬£¬£¬£¬ÊÇÓÉÁôÃÀ²©Ê¿ÑÏÍû¼ÑŮʿ½¨ÉèµÄ¡¢ÓµÓÐÍêÈ«×ÔÖ÷֪ʶ²úȨµÄÐÅÏ¢Çå¾²¸ß¿Æ¼¼ÆóÒµ¡£¡£¡£¡£ÊǺ£ÄÚ×î¾ßʵÁ¦µÄÐÅÏ¢Çå¾²²úÆ·¡¢Ç徲ЧÀͽâ¾ö¼Æ»®µÄÁ캽ÆóÒµÖ®Ò»¡£¡£¡£¡£

¹«Ë¾×ܲ¿Î»ÓÚ±±¾©ÊÐÖйشåÈí¼þÔ°¼øºÚµ£±£Íø´óÏ㬣¬£¬£¬£¬£¬£¬¹«Ë¾Ô±¹¤½ü4000ÈË£¬£¬£¬£¬£¬£¬£¬Ñз¢ÍŶÓ1200ÓàÈË, ÊÖÒÕЧÀÍÍŶÓ1300ÓàÈË¡£¡£¡£¡£ÔÚÌìϸ÷Ê¡¡¢ÊС¢×ÔÖÎÇøÉèÁ¢·ÖÖ§»ú¹¹ÁùÊ®¶à¸ö£¬£¬£¬£¬£¬£¬£¬ÓµÓÐÁýÕÖÌìϵÄÏúÊÛϵͳ¡¢ÇþµÀϵͳºÍÊÖÒÕÖ§³Öϵͳ¡£¡£¡£¡£¹«Ë¾ÓÚ2010Äê6ÔÂ23ÈÕÔÚÉîÛÚÖÐС°å¹ÒÅÆÉÏÊС£¡£¡£¡££¨¹ÉƱ´úÂ룺002439£©

¶àÄêÀ´£¬£¬£¬£¬£¬£¬£¬¼øºÚµ£±£ÍøÖÂÁ¦ÓÚÌṩ¾ßÓйú¼Ê¾ºÕùÁ¦µÄ×ÔÖ÷Á¢ÒìµÄÇå¾²²úÆ·ºÍ×î¼Ñʵ¼ùЧÀÍ£¬£¬£¬£¬£¬£¬£¬×ÊÖú¿Í»§ÖÜÈ«ÌáÉýÆäIT»ù´¡ÉèÊ©µÄÇå¾²ÐÔºÍÉú²úЧÄÜ£¬£¬£¬£¬£¬£¬£¬Îª´òÔìºÍÌáÉý¹ú¼Ê»¯µÄÃñ×åÐÅÏ¢Çå¾²¹¤ÒµÁì¾üÆ·ÅÆ¶ø²»Ð¸Æð¾¢¡£¡£¡£¡£

 

¹ØÓÚ¼øºÚµ£±£Íø

¼øºÚµ£±£ÍøÇå¾²Ó¦¼±ÏìÓ¦ÖÐÐÄÖ÷ÒªÕë¶ÔÖ÷ÒªÇå¾²Îó²îµÄÔ¤¾¯¡¢¸ú×ٺͷÖÏíÈ«Çò×îеÄÍþвÇ鱨ºÍÇå¾²±¨¸æ¡£¡£¡£¡£

¹Ø×¢ÒÔϹ«Öںţ¬£¬£¬£¬£¬£¬£¬»ñȡȫÇò×îÐÂÇå¾²×ÊѶ£º

image.png