CVE-2019-18609: Integer Overflow
An issue was discovered in amqphandleinput in amqpconnection.c in rabbitmq-c 0.9.0. There is an integer overflow that leads to heap memory corruption in the handling of CONNECTIONSTATEHEADER. A rogue server could return a malicious frame header that leads to a smaller targetsize value than needed. This condition is then carried on to a memcpy function that copies too much data into a heap buffer.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2019-18609?
CVE-2019-18609 has a severity rating that indicates it can lead to heap memory corruption, which may allow for code execution or system compromise.
How do I fix CVE-2019-18609?
To fix CVE-2019-18609, upgrade to a version of rabbitmq-c newer than 0.10.0 or update the affected packages in your system.
Which versions of rabbitmq-c are affected by CVE-2019-18609?
Versions of rabbitmq-c prior to 0.10.0 are affected by CVE-2019-18609.
What impact does CVE-2019-18609 have on my system?
CVE-2019-18609 can lead to potential remote code execution or denial of service due to memory corruption.
Is CVE-2019-18609 exploit related?
Yes, CVE-2019-18609 can be exploited by a rogue server sending a malicious frame header to trigger the vulnerability.