CVE-2019-18609 Integer overflow in n/a

Critical 9.8 Published 1 Dec 2019 Updated 5 Aug 2024

A malicious RabbitMQ server can trigger an integer overflow in the client library, leading to heap corruption and potential code execution or denial of service.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2019-18609?

CVE-2019-18609 is a critical vulnerability in Canonical Ubuntu Linux, published on 1 Dec 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

An issue was discovered in amqp_handle_input in amqp_connection.c in rabbitmq-c 0.9.0. There is an integer overflow that leads to heap memory corruption in the handling of CONNECTION_STATE_HEADER. A rogue server could return a malicious frame header that leads to a smaller target_size value than needed. This condition is then carried on to a memcpy function that copies too much data into a heap buffer.

Weakness: CWE-787

Which versions are affected by CVE-2019-18609?

It affects 4 products.

Linux distribution packages (21)

`librabbitmq-devel` AlmaLinux:8	All versions	`0.9.0-2.el8`
`librabbitmq` Red Hat:enterprise_linux:7::computenode	All versions	`0:0.8.0-3.el7`
`librabbitmq-debuginfo` Red Hat:enterprise_linux:7::computenode	All versions	`0:0.8.0-3.el7`
`librabbitmq-devel` Red Hat:enterprise_linux:7::computenode	All versions	`0:0.8.0-3.el7`
`librabbitmq-examples` Red Hat:enterprise_linux:7::computenode	All versions	`0:0.8.0-3.el7`
`librabbitmq` Red Hat:enterprise_linux:7::server	All versions	`0:0.8.0-3.el7`
`librabbitmq-debuginfo` Red Hat:enterprise_linux:7::server	All versions	`0:0.8.0-3.el7`
`librabbitmq-devel` Red Hat:enterprise_linux:7::server	All versions	`0:0.8.0-3.el7`
`librabbitmq-examples` Red Hat:enterprise_linux:7::server	All versions	`0:0.8.0-3.el7`
`librabbitmq` Red Hat:enterprise_linux:7::workstation	All versions	`0:0.8.0-3.el7`
`librabbitmq-debuginfo` Red Hat:enterprise_linux:7::workstation	All versions	`0:0.8.0-3.el7`
`librabbitmq-devel` Red Hat:enterprise_linux:7::workstation	All versions	`0:0.8.0-3.el7`
`librabbitmq-examples` Red Hat:enterprise_linux:7::workstation	All versions	`0:0.8.0-3.el7`
`librabbitmq` Red Hat:enterprise_linux:8::baseos	All versions	`0:0.9.0-2.el8`
`librabbitmq-debuginfo` Red Hat:enterprise_linux:8::baseos	All versions	`0:0.9.0-2.el8`
`librabbitmq-debugsource` Red Hat:enterprise_linux:8::baseos	All versions	`0:0.9.0-2.el8`
`librabbitmq-tools-debuginfo` Red Hat:enterprise_linux:8::baseos	All versions	`0:0.9.0-2.el8`
`librabbitmq-debuginfo` Red Hat:enterprise_linux:8::crb	All versions	`0:0.9.0-2.el8`
`librabbitmq-debugsource` Red Hat:enterprise_linux:8::crb	All versions	`0:0.9.0-2.el8`
`librabbitmq-devel` Red Hat:enterprise_linux:8::crb	All versions	`0:0.9.0-2.el8`
`librabbitmq-tools-debuginfo` Red Hat:enterprise_linux:8::crb	All versions	`0:0.9.0-2.el8`

Products include Canonical Ubuntu Linux, Debian Debian Linux, Fedoraproject Fedora, Rabbitmq-C Project Rabbitmq-C.

How do I fix CVE-2019-18609?

Upgrade to a fixed version.

Is CVE-2019-18609 being exploited?

There is no known exploitation of CVE-2019-18609 in the wild and no public exploit code.

All Canonical Ubuntu Linux vulnerabilities

Sources

Also known as ALSA-2020:4445, DEBIAN-CVE-2019-18609, DLA-2022-1, GHSA-356h-gg7j-mwv3, RHSA-2020:3949, RHSA-2020:4445 and 4 more.