Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubGitHub Advisory DatabaseGHSA-HRFH-7J5F-8CCR
HistoryMay 24, 2022 - 5:01 p.m.

Pivotal RabbitMQ is vulnerable to a denial of service attack

2022-05-2417:01:50
CWE-134
GitHub Advisory Database
github.com
22
pivotal
rabbitmq
denial of service

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.451

Percentile

97.4%

JSON

Pivotal RabbitMQ, versions 3.7.x prior to 3.7.21 and 3.8.x prior to 3.8.1, and RabbitMQ for Pivotal Platform, 1.16.x versions prior to 1.16.7 and 1.17.x versions prior to 1.17.4, contain a web management plugin that is vulnerable to a denial of service attack. The “X-Reason” HTTP Header can be leveraged to insert a malicious Erlang format string that will expand and consume the heap, resulting in the server crashing.

Affected configurations

Vulners
Node
rabbitmqjms_clientRange1.17.0–1.17.4rabbitmq
OR
rabbitmqjms_clientRange<1.16.7rabbitmq
OR
rabbitmqjms_clientRange3.8.0–3.8.1rabbitmq
OR
rabbitmqjms_clientRange3.7.0–3.7.21rabbitmq
VendorProductVersionCPE
rabbitmqjms_client*cpe:2.3:a:rabbitmq:jms_client:*:*:*:*:*:rabbitmq:*:*

Related

checkpoint_advisories 1
ubuntucve 1
redhatcve 1
symantec 1
nessus 6
cve 1
debiancve 1
osv 4
veracode 1
prion 1
nvd 1
cvelist 1
fedora 2
openvas 4
redhat 1
ubuntu 1
debian 1
oracle 1
checkpoint_advisories
checkpoint_advisories
Pivotal RabbitMQ X-Reason Denial of Service (CVE-2019-11287)
2020-04-27 00:00:00
ubuntucve
ubuntucve
CVE-2019-11287
2019-11-23 00:00:00
redhatcve
redhatcve
CVE-2019-11287
2019-12-13 15:08:28
symantec
symantec
Pivotal RabbitMQ CVE-2019-11287 Remote Denial of Service Vulnerability
2019-11-22 00:00:00
nessus
nessus
Pivotal RabbitMQ 3.7.x < 3.7.21 / 3.8.x < 3.8.1 Denial of Service
2020-12-29 00:00:00
Fedora 30 : rabbitmq-server (2019-74d2feb5be)
2019-12-09 00:00:00
Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : RabbitMQ vulnerabilities (USN-5004-1)
2021-06-24 00:00:00
cve
cve
CVE-2019-11287
2019-11-23 00:15:10
debiancve
debiancve
CVE-2019-11287
2019-11-23 00:15:10
osv
osv
CVE-2019-11287
2019-11-23 00:15:10
Pivotal RabbitMQ is vulnerable to a denial of service attack
2022-05-24 17:01:50
rabbitmq-server vulnerabilities
2021-06-24 15:04:30
veracode
veracode
Denial Of Service
2021-08-12 14:37:10
prion
prion
Format string
2019-11-23 00:15:00
nvd
nvd
CVE-2019-11287
2019-11-23 00:15:10
cvelist
cvelist
CVE-2019-11287 RabbitMQ Web Management Plugin DoS via heap overflow
2019-11-22 23:26:08
fedora
fedora
[SECURITY] Fedora 30 Update: rabbitmq-server-3.7.22-1.fc30
2019-12-07 01:32:21
[SECURITY] Fedora 31 Update: rabbitmq-server-3.7.22-1.fc31
2019-12-07 01:51:04
openvas
openvas
Ubuntu: Security Advisory (USN-5004-1)
2021-06-25 00:00:00
Fedora Update for rabbitmq-server FEDORA-2019-6497f51791
2020-01-09 00:00:00
Fedora Update for rabbitmq-server FEDORA-2019-74d2feb5be
2019-12-08 00:00:00
redhat
redhat
(RHSA-2020:0078) Important: rabbitmq-server security update
2020-01-13 10:03:48
ubuntu
ubuntu
RabbitMQ vulnerabilities
2021-06-24 00:00:00
debian
debian
[SECURITY] [DLA 2710-1] rabbitmq-server security update
2021-07-19 17:21:29
oracle
oracle
Oracle Critical Patch Update Advisory - April 2023
2023-04-18 00:00:00

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.451

Percentile

97.4%

JSON
Related for GHSA-HRFH-7J5F-8CCR
checkpoint_advisories1ubuntucve1redhatcve1symantec1nessus6cve1debiancve1osv4veracode1prion1nvd1cvelist1fedora2openvas4redhat1ubuntu1debian1oracle1