An issue was discovered in amqp_handle_input in amqp_connection.c in rabbitmq-c 0.9.0. There is an integer overflow that leads to heap memory corruption in the handling of CONNECTION_STATE_HEADER. A rogue server could return a malicious frame header that leads to a smaller target_size value than needed. This condition is then carried on to a memcpy function that copies too much data into a heap buffer.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade librabbitmq-devel | May 4, 2022 | Dec 1, 2019 |
| Amazon_linux | — | Upgrade librabbitmq | Jul 18, 2020 | Dec 1, 2019 |
| Centos_linux | — | Upgrade librabbitmq-debuginfoUpgrade librabbitmqUpgrade librabbitmq-debugsourceUpgrade librabbitmq-tools-debuginfoUpgrade librabbitmq-examplesUpgrade librabbitmq-devel | Oct 1, 2020 | Dec 1, 2019 |
| Debian | — | Upgrade librabbitmq | Dec 9, 2019 | Dec 1, 2019 |
| Freebsd | — | Upgrade rabbitmq-cUpgrade rabbitmq-c-devel | Nov 4, 2022 | Jun 25, 2021 |
| Gentoo Linux | — | Upgrade net-libs/rabbitmq-c. | Mar 16, 2020 | Dec 1, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade librabbitmq | Feb 24, 2020 | Dec 1, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade librabbitmq | Feb 26, 2020 | Dec 1, 2019 |
| Oracle_linux | — | Upgrade librabbitmqUpgrade librabbitmq-examplesUpgrade librabbitmq-devel | Oct 7, 2020 | Dec 1, 2019 |
| Redhat_linux | — | Upgrade librabbitmqUpgrade librabbitmq-develUpgrade librabbitmq-debugsourceUpgrade librabbitmq-examplesUpgrade librabbitmq-tools-debuginfoUpgrade librabbitmq-debuginfo | Oct 1, 2020 | Dec 1, 2019 |
| Suse | — | Upgrade librabbitmq-develUpgrade librabbitmq4 | Feb 4, 2022 | Dec 1, 2019 |
| Ubuntu | — | Upgrade librabbitmq1 (Ubuntu Pro)Upgrade amqp-tools (Ubuntu Pro)Upgrade librabbitmq-devUpgrade amqp-toolsUpgrade librabbitmq4 | Dec 6, 2019 | Dec 1, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub