Cowboy HTTP/1.1 Invalid Response Trailer Handling Vulnerability Fix

Vulnerability Overview This vulnerability concerns the handling of invalid response headers by the Cowboy framework within the HTTP/1.1 protocol. By default, Cowboy terminates the connection and returns an HTTP 500 error to prevent sending HTTP responses containing invalid response headers. However, when the invalid headers are trailers, this check is not executed in all cases, potentially leading to security risks. Impact Scope Affected Versions: Specific versions of the Cowboy framework (specific version numbers are not explicitly mentioned). Impact Scenarios: When the Cowboy framework processes HTTP/1.1 responses, if the response headers or trailers contain invalid data, it may result in connection termination or improper error handling. Remediation 1. Add Configuration Option: - The configuration option was added to the and files, allowing users to choose whether to ignore invalid response headers. - The default value is , which terminates the connection and returns an HTTP 500 error. - Users can set this to to disregard invalid headers. 2. Code Modifications: - The logic for handling response headers and trailers in the file was modified to ensure that header checks are performed in all cases. - A function was added to check and handle invalid headers. 3. Test Cases: - Corresponding test cases were added to and to verify that the behavior after the fix matches expectations. POC Code The following is the relevant POC code block: The above code demonstrates the specific implementation and test cases for handling invalid response headers within the Cowboy framework.

Goal Reached Thanks to every supporter — we hit 100%!

Cowboy HTTP/1.1 Invalid Response Trailer Handling Vulnerability Fix

More from this source