PT-2018-11511 · Apache · Apache Qpid Broker-J

Publicado 2018-02-09 · Atualizado 2018-10-19 · CVE-2018-1298

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Apache Qpid Broker-J version 7.0.0

Description A Denial of Service issue was found in the authentication functionality for AMQP protocols 0-8, 0-9, 0-91, and 0-10 when the PLAIN or XOAUTH2 SASL mechanism is used. This allows an unauthenticated attacker to crash the broker instance. The issue affects connections using specific SASL mechanisms, including those supported by Authentication Providers of types Plain, PlainPasswordFile, SimpleLDAP, Base64MD5PasswordFile, MD5, SCRAM-SHA-256, SCRAM-SHA-1 for PLAIN, and OAuth2 for XOAUTH2. AMQP 1.0 and HTTP connections are not affected.

Recommendations For Apache Qpid Broker-J version 7.0.0, consider disabling the use of PLAIN and XOAUTH2 SASL mechanisms in the Authentication Providers until a patch is available. Restrict access to the affected AMQP ports configured with vulnerable Authentication Providers to minimize the risk of exploitation.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2018-1298

GHSA-6W3V-66MJ-2QM6

Produtos afetados

Apache Qpid Broker-J

Referências · 6

• https://lists.apache.org/thread.html/d9087e9e57c9b6376754e2b4ea8cd5e9ae6449ed17fc384640c9c9e1@%3Cusers.qpid.apache.org%3E · Nota
• https://osv.dev/vulnerability/GHSA-6w3v-66mj-2qm6 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-1298 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-1298 · Aviso do Fabricante
• https://lists.apache.org/thread.html/d9087e9e57c9b6376754e2b4ea8cd5e9ae6449ed17fc384640c9c9e1%40%3Cusers.qpid.apache.org%3E · Nota
• https://github.com/advisories/GHSA-6w3v-66mj-2qm6 · Nota