Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2020-4445

Опубликовано: 10 нояб. 2020
Источник: oracle-oval
Платформа: Oracle Linux 8

Описание

ELSA-2020-4445: librabbitmq security update (MODERATE)

[0.9.0-2]

  • Resolves: #1809992, CVE-2019-18609

Обновленные пакеты

Oracle Linux 8

Oracle Linux aarch64

librabbitmq

0.9.0-2.el8

librabbitmq-devel

0.9.0-2.el8

Oracle Linux x86_64

librabbitmq

0.9.0-2.el8

librabbitmq-devel

0.9.0-2.el8

Связанные CVE

Связанные уязвимости

CVSS3: 9.8
ubuntu
около 6 лет назад

An issue was discovered in amqp_handle_input in amqp_connection.c in rabbitmq-c 0.9.0. There is an integer overflow that leads to heap memory corruption in the handling of CONNECTION_STATE_HEADER. A rogue server could return a malicious frame header that leads to a smaller target_size value than needed. This condition is then carried on to a memcpy function that copies too much data into a heap buffer.

CVSS3: 8.6
redhat
около 6 лет назад

An issue was discovered in amqp_handle_input in amqp_connection.c in rabbitmq-c 0.9.0. There is an integer overflow that leads to heap memory corruption in the handling of CONNECTION_STATE_HEADER. A rogue server could return a malicious frame header that leads to a smaller target_size value than needed. This condition is then carried on to a memcpy function that copies too much data into a heap buffer.

CVSS3: 9.8
nvd
около 6 лет назад

An issue was discovered in amqp_handle_input in amqp_connection.c in rabbitmq-c 0.9.0. There is an integer overflow that leads to heap memory corruption in the handling of CONNECTION_STATE_HEADER. A rogue server could return a malicious frame header that leads to a smaller target_size value than needed. This condition is then carried on to a memcpy function that copies too much data into a heap buffer.

CVSS3: 9.8
debian
около 6 лет назад

An issue was discovered in amqp_handle_input in amqp_connection.c in r ...

github
больше 3 лет назад

An issue was discovered in amqp_handle_input in amqp_connection.c in rabbitmq-c 0.9.0. There is an integer overflow that leads to heap memory corruption in the handling of CONNECTION_STATE_HEADER. A rogue server could return a malicious frame header that leads to a smaller target_size value than needed. This condition is then carried on to a memcpy function that copies too much data into a heap buffer.