Lucene search

SNPSCVE-2021-33175

HistoryJun 08, 2021 - 3:15 p.m.

CVE-2021-33175

2021-06-0815:15:07

CWE-502

CWE-770

SNPS

web.nvd.nist.gov

cve-2021-33175

emq x broker

denial of service

vulnerability

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

42.5%

JSON

EMQ X Broker versions prior to 4.2.8 are vulnerable to a denial of service attack as a result of excessive memory consumption due to the handling of untrusted inputs. These inputs cause the message broker to consume large amounts of memory, resulting in the application being terminated by the operating system.

Affected configurations

Nvd

Node

emqxemq_x_brokerRange<4.2.8

VendorProductVersionCPE
emqxemq_x_broker*cpe:2.3:a:emqx:emq_x_broker:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
emqx	emq_x_broker	*	cpe:2.3:a:emqx:emq_x_broker::::::::

CNA Affected

[
  {
    "product": "EMQ X Broker",
    "vendor": "EMQ Technologies",
    "versions": [
      {
        "status": "affected",
        "version": "<4.2.8"
      }
    ]
  }
]

References

www.synopsys.com/blogs/software-security/cyrc-advisory-rabbitmq-emqx-vernemq

Social References

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

42.5%

JSON

Related for CVE-2021-33175