Apache RocketMQ Client C++ 2.2.0 (RemotingCommand::Decode) Out-of-Bounds Read

Summary RocketMQ-Client-CPP is the C/C++ client of Apache RocketMQ, a distributed messaging and streaming platform with low latency, high performance and reliability, trillion-level capacity and flexible scalability. Description Apache RocketMQ Client C++ suffers from a remote out-of-bounds read...

Apache RocketMQ Client C++ 2.2.0 Out-of-Bounds Read

Apache RocketMQ Client C++ version 2.2.0 contains a remote out-of-bounds read in the RemotingCommand decoder that can allow a malicious broker or nameserver to crash a client. !/usr/bin/env bash Apache RocketMQ Client C++ 2.2.0 RemotingCommand::Decode Out-of-Bounds Read Vendor: The Apache Softwar...

Directory traversal

In Apache RocketMQ 4.2.0 to 4.6.0, when the automatic topic creation in the broker is turned on by default, an evil topic like “../../../../topic2020” is sent from rocketmq-client to the broker, a topic folder will be created in the parent directory in brokers, which leads to a directory traversa...

CVE-2019-17572

In Apache RocketMQ 4.2.0 to 4.6.0, when the automatic topic creation in the broker is turned on by default, an evil topic like “../../../../topic2020” is sent from rocketmq-client to the broker, a topic folder will be created in the parent directory in brokers, which leads to a directory traversa...

CVE-2019-17572: Improper Limitation of a Pathname to a Restricted Directory

In Apache RocketMQ 4.2.0 to 4.6.0, when the automatic topic creation in the broker is turned on by default, an evil topic like “../../../../topic2020” is sent from rocketmq-client to the broker, a topic folder will be created in the parent directory in brokers, which leads to a directory traversa...