Bug 1404150 (CVE-2015-8786)

Summary:	CVE-2015-8786 rabbitmq-server: DoS via lengths_age or lengths_incr parameter in the management plugin
Product:	[Other] Security Response	Reporter:	Andrej Nemec <anemec>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED ERRATA	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	aortega, apevec, ayoung, chrisw, cvsbot-xmlrpc, erlang, hubert.plociniczak, jeckersb, jjoyce, josh, jschluet, kbasil, lemenkov, lhh, lpeer, markmc, nthomas, plemenko, rbryant, rjones, sankarshan, sclewis, sisharma, slong, srevivo, s, tdecacqu
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	rabbitmq-server 3.6.1	Doc Type:	If docs needed, set a value
Doc Text:	A resource-consumption flaw was found in RabbitMQ Server, where the lengths_age or lengths_incr parameters were not validated in the management plugin. Remote, authenticated users with certain privileges could exploit this flaw to cause a denial of service by passing values which were too large.	Story Points:	---
Clone Of:		Environment:
Last Closed:	2017-03-15 23:04:23 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	1404151, 1413415, 1413416, 1413417, 1413418, 1413419
Bug Blocks:	1404153

Description Andrej Nemec 2016-12-13 08:33:07 UTC

The Management plugin in RabbitMQ before 3.6.1 allows remote
authenticated users with certain privileges to cause a denial of
service (resource consumption) via the (1) lengths_age or (2)
lengths_incr parameter.

Upstream bug:

https://github.com/rabbitmq/rabbitmq-management/issues/97

Upstream patches:

https://github.com/rabbitmq/rabbitmq-management/pull/106/commits/5ebc159d3f65ab230e3f261e81ee49d00ebc57c3
https://github.com/rabbitmq/rabbitmq-management/pull/106/commits/298d86fe8cb6865bf50cf91f274b1872cb7bd7ba

Comment 1 Andrej Nemec 2016-12-13 08:33:58 UTC

Created rabbitmq-server tracking bugs for this issue:

Affects: epel-all [bug 1404151]

Comment 5 errata-xmlrpc 2017-02-01 14:17:45 UTC

This issue has been addressed in the following products:

  Red Hat OpenStack Platform 8.0 (Liberty)

Via RHSA-2017:0226 https://rhn.redhat.com/errata/RHSA-2017-0226.html

Comment 6 errata-xmlrpc 2017-03-15 12:31:27 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7

Via RHSA-2017:0532 https://rhn.redhat.com/errata/RHSA-2017-0532.html

Comment 7 errata-xmlrpc 2017-03-15 12:41:40 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6

Via RHSA-2017:0533 https://rhn.redhat.com/errata/RHSA-2017-0533.html

Comment 8 errata-xmlrpc 2017-03-15 12:42:11 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7

Via RHSA-2017:0531 https://rhn.redhat.com/errata/RHSA-2017-0531.html

Comment 9 errata-xmlrpc 2017-03-15 12:42:52 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7

Via RHSA-2017:0530 https://rhn.redhat.com/errata/RHSA-2017-0530.html