CVE-2019-5645 Rapid7 Metasploit HTTP Handler Denial of Service
An attacker can cause denial of service in Metasploit HTTP handlers by sending crafted requests that trigger resource exhaustion or block new sessions.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-5645?
CVE-2019-5645 is a high-severity denial of service vulnerability in Rapid7 Metasploit Framework, published on 1 Sep 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
By sending a specially crafted HTTP GET request to a listening Rapid7 Metasploit HTTP handler, an attacker can register an arbitrary regular expression. When evaluated, this malicious handler can either prevent new HTTP handler sessions from being established, or cause a resource exhaustion on the Metasploit server.
Weakness: CWE-400
Which versions are affected by CVE-2019-5645?
It affects 1 product.
Products include Rapid7 Metasploit.
How do I fix CVE-2019-5645?
No fix has been published for CVE-2019-5645 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2019-5645 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2019-5645 exists.
Public exploit code: 1 Metasploit module.
Other vulnerabilities in Rapid7 Metasploit Framework
- CVE-2020-7385 Metasploit Framework 'drb_remote_codeexec' code execution
- CVE-2020-7377 Rapid7 Metasploit Framework Relative Path Traversal in telpho10_credential_dump module
- CVE-2017-5235 Other in Metasploit Pro
- CVE-2019-5624 Rapid7 Metasploit Framework Zip Import Directory Traversal
- CVE-2020-7376 Rapid7 Metasploit Framework Relative Path Traversal in enum_osx module
Sources
Also known as GHSA-wp3v-g466-8g44.