exploit the possibilities

Red Hat Security Advisory 2016-0369-01

Red Hat Security Advisory 2016-0369-01
Posted Mar 9, 2016
Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2016-0369-01 - RabbitMQ is an implementation of AMQP, the emerging standard for high performance enterprise messaging. The RabbitMQ server is a robust and scalable implementation of an AMQP broker. A cross-site scripting vulnerability was discovered in RabbitMQ, which allowed using api/ path info to inject and receive data. A remote attacker could use this flaw to create an "/api/..." URL, forcing a server error that resulted in the server returning an HTML page with embedded text from the URL. A response-splitting vulnerability was discovered in RabbitMQ. An /api/definitions URL could be specified, which then caused an arbitrary additional header to be returned. A remote attacker could use this flaw to inject arbitrary HTTP headers and possibly gain access to secure data.

tags | advisory, remote, web, arbitrary, xss
systems | linux, redhat
advisories | CVE-2014-9649, CVE-2014-9650
MD5 | c0d6e2f48b04669cfe8ffd971b234d85

Red Hat Security Advisory 2016-0369-01

Change Mirror Download
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

=====================================================================
Red Hat Security Advisory

Synopsis: Moderate: rabbitmq-server security and bug fix update
Advisory ID: RHSA-2016:0369-01
Product: Red Hat Enterprise Linux OpenStack Platform
Advisory URL: https://rhn.redhat.com/errata/RHSA-2016-0369.html
Issue date: 2016-03-08
CVE Names: CVE-2014-9649 CVE-2014-9650
=====================================================================

1. Summary:

Updated rabbitmq-server packages that fix two security issues and one bug
are now available for Red Hat Enterprise Linux OpenStack Platform 5.0
(Icehouse) for RHEL 7.

Red Hat Product Security has rated this update as having Moderate security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.

2. Relevant releases/architectures:

Red Hat Enterprise Linux OpenStack Platform 5.0 for RHEL 7 - noarch

3. Description:

RabbitMQ is an implementation of AMQP, the emerging standard for high
performance enterprise messaging. The RabbitMQ server is a robust and
scalable implementation of an AMQP broker.

A cross-site scripting vulnerability was discovered in RabbitMQ, which
allowed using api/ path info to inject and receive data. A remote attacker
could use this flaw to create an "/api/..." URL, forcing a server error
that resulted in the server returning an HTML page with embedded text from
the URL (not escaped). (CVE-2014-9649)

A response-splitting vulnerability was discovered in RabbitMQ.
An /api/definitions URL could be specified, which then caused an arbitrary
additional header to be returned. A remote attacker could use this flaw to
inject arbitrary HTTP headers and possibly gain access to secure data.
(CVE-2014-9650)

This update also fixes the following bug:

* Previously, if the rabbit_mirror_queue_master did not return when using
HA and 'auto_delete' queues, the RabbitMQ server blocked channels during
termination. These channels would then have no associated connections and
were displayed as 'unknown'. This issue has been resolved. (BZ#1303748)

All rabbitmq-server users are advised to upgrade to these updated packages,
which contain backported patches to correct these issues.

4. Solution:

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

5. Bugs fixed (https://bugzilla.redhat.com/):

1185514 - CVE-2014-9649 RabbitMQ: /api/... XSS vulnerability
1185515 - CVE-2014-9650 RabbitMQ: /api/definitions response splitting vulnerability
1303748 - Blocked channels and queues using HA

6. Package List:

Red Hat Enterprise Linux OpenStack Platform 5.0 for RHEL 7:

Source:
rabbitmq-server-3.3.5-18.el7ost.src.rpm

noarch:
rabbitmq-server-3.3.5-18.el7ost.noarch.rpm

These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/

7. References:

https://access.redhat.com/security/cve/CVE-2014-9649
https://access.redhat.com/security/cve/CVE-2014-9650
https://access.redhat.com/security/updates/classification/#moderate

8. Contact:

The Red Hat security contact is <secalert@redhat.com>. More contact
details at https://access.redhat.com/security/team/contact/

Copyright 2016 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iD8DBQFW31rIXlSAg2UNWIIRAjdPAJ0fUKzs8LLSgcU8c88sbTRQ73jt8ACbBPzH
guBG3UJRN1ejmepjcXyntdU=
=g/pj
-----END PGP SIGNATURE-----


--
RHSA-announce mailing list
RHSA-announce@redhat.com
https://www.redhat.com/mailman/listinfo/rhsa-announce

Comments

RSS Feed Subscribe to this comment feed

No comments yet, be the first!

Login or Register to post a comment

File Archive:

October 2019

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Oct 1st
    24 Files
  • 2
    Oct 2nd
    15 Files
  • 3
    Oct 3rd
    7 Files
  • 4
    Oct 4th
    4 Files
  • 5
    Oct 5th
    10 Files
  • 6
    Oct 6th
    1 Files
  • 7
    Oct 7th
    21 Files
  • 8
    Oct 8th
    19 Files
  • 9
    Oct 9th
    5 Files
  • 10
    Oct 10th
    20 Files
  • 11
    Oct 11th
    17 Files
  • 12
    Oct 12th
    4 Files
  • 13
    Oct 13th
    4 Files
  • 14
    Oct 14th
    15 Files
  • 15
    Oct 15th
    19 Files
  • 16
    Oct 16th
    25 Files
  • 17
    Oct 17th
    17 Files
  • 18
    Oct 18th
    7 Files
  • 19
    Oct 19th
    1 Files
  • 20
    Oct 20th
    4 Files
  • 21
    Oct 21st
    5 Files
  • 22
    Oct 22nd
    0 Files
  • 23
    Oct 23rd
    0 Files
  • 24
    Oct 24th
    0 Files
  • 25
    Oct 25th
    0 Files
  • 26
    Oct 26th
    0 Files
  • 27
    Oct 27th
    0 Files
  • 28
    Oct 28th
    0 Files
  • 29
    Oct 29th
    0 Files
  • 30
    Oct 30th
    0 Files
  • 31
    Oct 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2019 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close