PT-2018-11511 · Apache · Apache Qpid Broker-J

Published 2018-02-09 · Updated 2018-10-19 · CVE-2018-1298

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Apache Qpid Broker-J version 7.0.0

Description A Denial of Service issue was found in the authentication functionality for AMQP protocols 0-8, 0-9, 0-91, and 0-10 when the PLAIN or XOAUTH2 SASL mechanism is used. This allows an unauthenticated attacker to crash the broker instance. The issue affects connections using specific SASL mechanisms, including those supported by Authentication Providers of types Plain, PlainPasswordFile, SimpleLDAP, Base64MD5PasswordFile, MD5, SCRAM-SHA-256, SCRAM-SHA-1 for PLAIN, and OAuth2 for XOAUTH2. AMQP 1.0 and HTTP connections are not affected.

Recommendations For Apache Qpid Broker-J version 7.0.0, consider disabling the use of PLAIN and XOAUTH2 SASL mechanisms in the Authentication Providers until a patch is available. Restrict access to the affected AMQP ports configured with vulnerable Authentication Providers to minimize the risk of exploitation.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2018-1298

GHSA-6W3V-66MJ-2QM6

Affected Products

Apache Qpid Broker-J

References · 6

• https://osv.dev/vulnerability/GHSA-6w3v-66mj-2qm6 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-1298 · Security Note
• https://osv.dev/vulnerability/CVE-2018-1298 · Vendor Advisory
• https://lists.apache.org/thread.html/d9087e9e57c9b6376754e2b4ea8cd5e9ae6449ed17fc384640c9c9e1@%3Cusers.qpid.apache.org%3E · Note
• https://lists.apache.org/thread.html/d9087e9e57c9b6376754e2b4ea8cd5e9ae6449ed17fc384640c9c9e1%40%3Cusers.qpid.apache.org%3E · Note
• https://github.com/advisories/GHSA-6w3v-66mj-2qm6 · Note