PT-2019-6093 · Pivotal+4 · Rabbitmq+3

Mal + 1 · Published 2019-11-22 · Updated 2022-09-22 · CVE-2019-11287

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Pivotal RabbitMQ versions 3.7.x prior to 3.7.21 Pivotal RabbitMQ versions 3.8.x prior to 3.8.1 RabbitMQ for Pivotal Platform versions 1.16.x prior to 1.16.7 RabbitMQ for Pivotal Platform versions 1.17.x prior to 1.17.4

Description The issue is related to an error in the "X-Reason" HTTP header, which can be exploited to cause a denial of service attack. This can be achieved by inserting a malicious Erlang format string through the "X-Reason" HTTP Header, resulting in the server crashing due to heap consumption.

Recommendations For Pivotal RabbitMQ versions 3.7.x prior to 3.7.21, update to version 3.7.21 or later. For Pivotal RabbitMQ versions 3.8.x prior to 3.8.1, update to version 3.8.1 or later. For RabbitMQ for Pivotal Platform versions 1.16.x prior to 1.16.7, update to version 1.16.7 or later. For RabbitMQ for Pivotal Platform versions 1.17.x prior to 1.17.4, update to version 1.17.4 or later. As a temporary workaround, consider restricting access to the web management plugin to minimize the risk of exploitation.

Exploit

Fix

DoS

Resource Exhaustion

Use of Externally-Controlled Format String

Weakness Enumeration

CWE-400

CWE-134

Related Identifiers

BDU:2021-05251

CVE-2019-11287

DLA-2710-1

DLA-2710-2

GHSA-HRFH-7J5F-8CCR

RHSA-2020:0078

SUSE-SU-2022:3338-1

SUSE-SU-2022:3339-1

USN-5004-1

Affected Products

Astra Linux

Linuxmint

Rabbitmq

Ubuntu

References · 46

• 🔥 https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2019-11287-DoS%20via%20Heap%20Overflow-RabbitMQ%20Web%20Management%20Plugin · Exploit
• https://osv.dev/vulnerability/USN-5004-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2019-11287 · Vendor Advisory
• https://pivotal.io/security/cve-2019-11287 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2020:0078 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EEQ6O7PMNJKYFMQYHAB55L423GYK63SO · Vendor Advisory
• https://osv.dev/vulnerability/DLA-2710-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-11287 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:3339-1 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-hrfh-7j5f-8ccr · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20211008SE16 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-11287 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-05251 · Security Note
• https://ubuntu.com/security/CVE-2021-22116 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-2710-2 · Vendor Advisory