Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:31578
HistoryAug 12, 2021 - 2:37 p.m.

Denial Of Service

2021-08-1214:37:10
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
denial of service
rabbitmq-server
http header
erlang format string
heap consumption
server crashing

EPSS

0.451

Percentile

97.4%

JSON

rabbitmq-server is vulnerable to denial of service. The vulnerability exists due to the lack of sanitizating the “X-Reason” HTTP Header which can be leveraged to insert a malicious Erlang format string that will expand and consume the heap, resulting in the server crashing.

Related

checkpoint_advisories 1
ubuntucve 1
redhatcve 1
symantec 1
nessus 6
github 1
cve 1
debiancve 1
osv 4
prion 1
nvd 1
cvelist 1
fedora 2
openvas 4
ubuntu 1
redhat 1
debian 1
oracle 1
checkpoint_advisories
checkpoint_advisories
Pivotal RabbitMQ X-Reason Denial of Service (CVE-2019-11287)
2020-04-27 00:00:00
ubuntucve
ubuntucve
CVE-2019-11287
2019-11-23 00:00:00
redhatcve
redhatcve
CVE-2019-11287
2019-12-13 15:08:28
symantec
symantec
Pivotal RabbitMQ CVE-2019-11287 Remote Denial of Service Vulnerability
2019-11-22 00:00:00
nessus
nessus
Pivotal RabbitMQ 3.7.x < 3.7.21 / 3.8.x < 3.8.1 Denial of Service
2020-12-29 00:00:00
Fedora 30 : rabbitmq-server (2019-74d2feb5be)
2019-12-09 00:00:00
Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : RabbitMQ vulnerabilities (USN-5004-1)
2021-06-24 00:00:00
github
github
Pivotal RabbitMQ is vulnerable to a denial of service attack
2022-05-24 17:01:50
cve
cve
CVE-2019-11287
2019-11-23 00:15:10
debiancve
debiancve
CVE-2019-11287
2019-11-23 00:15:10
osv
osv
Pivotal RabbitMQ is vulnerable to a denial of service attack
2022-05-24 17:01:50
CVE-2019-11287
2019-11-23 00:15:10
rabbitmq-server vulnerabilities
2021-06-24 15:04:30
prion
prion
Format string
2019-11-23 00:15:00
nvd
nvd
CVE-2019-11287
2019-11-23 00:15:10
cvelist
cvelist
CVE-2019-11287 RabbitMQ Web Management Plugin DoS via heap overflow
2019-11-22 23:26:08
fedora
fedora
[SECURITY] Fedora 30 Update: rabbitmq-server-3.7.22-1.fc30
2019-12-07 01:32:21
[SECURITY] Fedora 31 Update: rabbitmq-server-3.7.22-1.fc31
2019-12-07 01:51:04
openvas
openvas
Ubuntu: Security Advisory (USN-5004-1)
2021-06-25 00:00:00
Fedora Update for rabbitmq-server FEDORA-2019-6497f51791
2020-01-09 00:00:00
Fedora Update for rabbitmq-server FEDORA-2019-74d2feb5be
2019-12-08 00:00:00
ubuntu
ubuntu
RabbitMQ vulnerabilities
2021-06-24 00:00:00
redhat
redhat
(RHSA-2020:0078) Important: rabbitmq-server security update
2020-01-13 10:03:48
debian
debian
[SECURITY] [DLA 2710-1] rabbitmq-server security update
2021-07-19 17:21:29
oracle
oracle
Oracle Critical Patch Update Advisory - April 2023
2023-04-18 00:00:00

EPSS

0.451

Percentile

97.4%

JSON
Related for VERACODE:31578
checkpoint_advisories1ubuntucve1redhatcve1symantec1nessus6github1cve1debiancve1osv4prion1nvd1cvelist1fedora2openvas4ubuntu1redhat1debian1oracle1