CVE-2019-11287

🗓️ 22 Nov 2019 23:26:08Reported by pivotalType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 297 Views

Pivotal RabbitMQ and RabbitMQ for Pivotal Platform web management plugin denial of service vulnerability

Reporter	Title	Published	Views	Family All 51
AstraLinux	Astra Linux - уязвимость в rabbitmq-server	3 May 202623:59	–	astralinux
Circl	CVE-2019-11287	26 Feb 202414:42	–	circl
CNVD	Pivotal Software RabbitMQ Web Management Plugin Resource Management Error Vulnerability	25 Nov 201900:00	–	cnvd
Check Point Advisories	Pivotal RabbitMQ X-Reason Denial of Service (CVE-2019-11287)	27 Apr 202000:00	–	checkpoint_advisories
Cvelist	CVE-2019-11287 RabbitMQ Web Management Plugin DoS via heap overflow	22 Nov 201923:26	–	cvelist
Debian	[SECURITY] [DLA 2710-1] rabbitmq-server security update	19 Jul 202117:21	–	debian
Debian CVE	CVE-2019-11287	22 Nov 201923:26	–	debiancve
Tenable Nessus	Debian DLA-2710-1 : rabbitmq-server - LTS security update	26 Jul 202100:00	–	nessus
Tenable Nessus	Fedora 31 : rabbitmq-server (2019-6497f51791)	9 Dec 201900:00	–	nessus
Tenable Nessus	Fedora 30 : rabbitmq-server (2019-74d2feb5be)	9 Dec 201900:00	–	nessus

NVD

Node

broadcom rabbitmq_serverRange3.8.0–3.8.1

pivotal_software rabbitmqRange1.16.0–1.16.7pivotal_cloud_foundry

pivotal_software rabbitmqRange1.17.0–1.17.4pivotal_cloud_foundry

pivotal_software rabbitmqRange3.7.0–3.7.21

Node

fedoraproject fedoraMatch30

fedoraproject fedoraMatch31

Node

redhat openstackMatch15

Node

debian debian_linuxMatch9.0

[
  {
    "product": "RabbitMQ for Pivotal Platform",
    "vendor": "Pivotal",
    "versions": [
      {
        "lessThan": "1.16.7",
        "status": "affected",
        "version": "1.16",
        "versionType": "custom"
      },
      {
        "lessThan": "1.17.4",
        "status": "affected",
        "version": "1.17",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "RabbitMQ",
    "vendor": "Pivotal",
    "versions": [
      {
        "lessThan": "v3.7.21",
        "status": "affected",
        "version": "3.7",
        "versionType": "custom"
      },
      {
        "lessThan": "v3.8.1",
        "status": "affected",
        "version": "3.8",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
pivotal	www.pivotal.io/security/cve-2019-11287
access	www.access.redhat.com/errata/RHSA-2020:0078
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EEQ6O7PMNJKYFMQYHAB55L423GYK63SO/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PYTGR3D5FW2O25RXZOTIZMOD2HAUVBE4/
github	www.github.com/DrunkenShells/Disclosures/tree/master/CVE-2019-11287-DoS%20via%20Heap%20Overflow-RabbitMQ%20Web%20Management%20Plugin
lists	www.lists.debian.org/debian-lts-announce/2021/07/msg00011.html

02 Apr 2025 14:13Current

5.6Medium risk

Vulners AI Score5.6

CVSS 25

CVSS 3.17.5

CVSS 34.5

EPSS0.04604