REDHAT-BUG-2531301: Medium severity Red Hat skupper-router vulnerability
A denial-of-service vulnerability was discovered in skupper-router within the AMQP field parser. The flaw is caused by unbounded recursion when processing deeply nested or specially crafted AMQP messages, leading to a stack overflow. An attacker who can send messages to the router can trigger this crash. Exploitation requires the attacker to possess a valid x.509 certificate signed by the Red Hat Service Interconnect network's certificate authority. Successful exploitation results in the skupper-router process crashing, terminating all active connections and preventing new traffic from being routed through the affected node.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker must be able to send AMQP messages to the router and possess a valid X.509 certificate signed by the Red Hat Service Interconnect network certificate authority.
What is the operational impact of successful exploitation?
Successful exploitation crashes the skupper-router process. This terminates active connections and prevents the affected node from routing new traffic.
What type of input triggers the crash?
The issue is triggered by deeply nested or specially crafted AMQP messages that cause unbounded recursion in the AMQP field parser, resulting in a stack overflow.