CVE-2019-11287 — CVE & Security Advisory Radar

🎯 CVE-2019-11287 🧪 PoC 🇪🇺 EUVD

📄 .md Alle CVEs anzeigen ✕

CVE-2019-11287 | Pivotal RabbitMQ, versions 3.7.x prior to 3.7.21 and 3.8.x prior to 3.8.1, and RabbitMQ for Pivotal Platform, 1.16.x versions prior to 1.16.7 and 1.17.x versions prior to 1.17.4, contain a web management plugin that is vulnerable to a denial of service attack. The "X-Reason" HTTP Header can be leveraged to insert a malicious Erlang format string that will expand and consume the heap, resulting in the server crashing.

Pivotal RabbitMQ, versions 3.7.x prior to 3.7.21 and 3.8.x prior to 3.8.1, and RabbitMQ for Pivotal Platform, 1.16.x versions prior to 1.16.7 and 1.17.x versions prior to 1.17.4, contain a web management plugin that is vulnerable to a denial of service attack. The "X-Reason" HTTP Header can be leveraged to insert a malicious Erlang format string that will expand and consume the heap, resulting in the server crashing.

Klassifikation & Betroffenheit:

Pivotal RabbitMQ for Pivotal Platform 1.16 <1.16.7RabbitMQ for Pivotal Platform 1.17 <1.17.4RabbitMQ 3.7 <v3.7.21RabbitMQ 3.8 <v3.8.1broadcom rabbitmq_server *pivotal_software rabbitmq *fedoraproject fedora 30fedoraproject fedora 31

Improper Control of Generation of Code ('Code Injection') 🎯 Medium

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

🛡️ Empfohlene Mitigation: Refactor your program so that you do not have to dynamically generate code.

Vollständige Definition bei MITRE ➔

⚔️ Typische Angriffsmuster (CAPEC):

CAPEC-35 · Leverage Executable Code in Non-Executab… (Very High) CAPEC-77 · Manipulating User-Controlled Variables (Very High) CAPEC-242 · Code Injection (High)

🎯 ATT&CK-Techniken (Kill-Chain-Verhalten):

T1027.006 · Obfuscated Files or Information: H… T1027.009 · Obfuscated Files or Information: E… T1564.009 · Hide Artifacts: Resource Forking

🧩 Ähnliche Schwachstellen (Hersteller/Klasse/Score-Band):

CVE-2019-11276 5.4 CVE-2019-3803 4.5 CVE-2019-11275 3.5 CVE-2019-11291 3.1

🧪 Exploit-Evidenz:

🐙 mbadanoiu/CVE-2019-11287

🩹 Patch verfügbar (OSV):

🩹 ed70791a5e1c8ef14e7e53ad59503d68d9a45f90 (Commit) 🩹 d75eb86dae6fbdc79b5413eb577bf36d9f3a6c87 (Commit)

📚 Referenzen & Quellen:

🇪🇺 Original-Eintrag (ENISA EUVD) 🇺🇸 NVD-Eintrag

Ausnutzungs-Zeitleiste:

Reserviert 2019

Veröffentlicht 11/2019

Heute 17.09.

CVSS-Vektor-Analyse: 4.5

AV · Angriffsvektor Netzwerk

AC · Komplexität Gering

PR · Privilegien Hoch

UI · Interaktion Erforderlich

S · Scope Unverändert

C · Vertraulichkeit Keine

I · Integrität Keine

A · Verfügbarkeit Hoch

CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H

Veröffentlicht:23.11.2019

Aktualisiert:17.06.2026 02:12

Assigner (CNA):pivotal

EUVD-ID:EUVD-2022-4206

Quellen: 🇪🇺 EUVD-Datenbank (ENISA) + 🇺🇸 NVD-Anreicherung · 24-h-Cache

CWE-94: Code Injection ✓ Offizieller Patch / Advisory verfügbar

💡 Gegenmaßnahme: Sicherheits-Update des Herstellers zeitnah einspielen und Netzwerksegmentierung prüfen.

Tier	2026-08-29	2026-09-16
≥90 %	4	0
≥50 %	4	0
≥10 %	3	0
<10 %	304	300

4.5 MEDIUM

🇪🇺 EUVD

EPSS

4.5%

CVE-2019-11287 🌐 Netzwerk (Remote) 🔐 Admin-Rechte nötig

🧪 Pivotal

CVE-2019-11287 | Pivotal RabbitMQ, versions 3.7.x prior to 3.7.21 and 3.8.x prior to 3.8.1, and RabbitMQ for Pivotal Platform, 1.16.x versions prior to 1.16.7 and 1.17.x versions prior to 1.17.4, contain a web management plugin that is vulnerable to a denial of service attack. The "X-Reason" HTTP Header can be leveraged to insert a malicious Erlang format string that will expand and consume the heap, resulting in the server crashing.

CWE-94: Code Injection ✓ Offizieller Patch / Advisory verfügbar

💡 Gegenmaßnahme: Sicherheits-Update des Herstellers zeitnah einspielen und Netzwerksegmentierung prüfen.

22.11.2019

🛡️ Details ➔

Zero-Day & Vulnerability Intelligence Hub