PT-2021-4577 · Rabbitmq+5 · Rabbitmq+5

Jonathan Knudsen · Published 2021-04-07 · Updated 2024-06-19 · CVE-2021-22116

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions RabbitMQ versions prior to 3.8.16

Description The issue is related to improper input validation in the AMQP 1.0 client connection endpoint, which can lead to a denial of service. A malicious user can exploit this by sending malicious AMQP messages to a RabbitMQ instance with the AMQP 1.0 plugin enabled.

Recommendations For versions prior to 3.8.16, update to version 3.8.16 or later to resolve the issue. As a temporary workaround, consider disabling the AMQP 1.0 plugin until a patch is available. Restrict access to the AMQP 1.0 client connection endpoint to minimize the risk of exploitation.

Exploit

Fix

DoS

Resource Exhaustion

RCE

Weakness Enumeration

CWE-400

CWE-20

Related Identifiers

BDU:2021-05248

BIT-RABBITMQ-2021-22116

CVE-2021-22116

DLA-2710-1

DLA-2710-2

MGASA-2021-0390

OPENSUSE-SU-2021:1334-1

OPENSUSE-SU-2021:3325-1

OPENSUSE-SU-2021_1334-1

OPENSUSE-SU-2021_3325-1

SUSE-FU-2024:2078-1

SUSE-SU-2021:3254-1

SUSE-SU-2021:3325-1

SUSE-SU-2021_3254-1

SUSE-SU-2021_3325-1

USN-5004-1

Affected Products

Astra Linux

Debian

Linuxmint

Rabbitmq

Suse

Ubuntu

References · 50

• 🔥 https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2019-11287-DoS%20via%20Heap%20Overflow-RabbitMQ%20Web%20Management%20Plugin · Exploit
• https://cve.org/CVERecord?id=CVE-2021-22116 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-22116 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-rabbitmq-2021-22116 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5004-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-22116 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2021:3254-1 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2021-0390 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-2710-2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-22116 · Security Note
• https://ubuntu.com/security/CVE-2021-22116 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5004-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2023-0316SE47MD · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2021:3325-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2023-0303SE17MD · Vendor Advisory