Apache RocketMQ远程命令执行漏洞

详细信息

漏洞类型

代码注入

漏洞描述

Apache RocketMQ是美国阿帕奇（Apache）基金会的一款轻量级的数据处理平台和消息传递引擎。Apache RocketMQ 5.1.0及之前版本在某些情况下，存在远程命令执行的风险。RocketMQ的NameServer、Broker和Controller组件对外暴露且缺乏权限验证，攻击者可以通过使用更新配置功能作为RocketMQ运行的系统用户执行命令来利用此漏洞。此外，攻击者还可以通过伪造RocketMQ协议内容来达到同样的效果。DreamBus僵尸网络等多个威胁组织正在使用此漏洞。

修复建议

RocketMQ 5.x用户升级到5.1.1或更高版本，Rocket MQ 4.x升级到4.9.6或更高版，可从Apache网站获得： https://lists.apache.org/thread/1s8j2c8kogthtpv3060yddk03zq0pxyp

参考链接

• https://lists.apache.org/thread/1s8j2c8kogthtpv3060yddk03zq0pxyp

  OSV · vendor-advisory

• https://cxsecurity.com/cveshow/CVE-2023-33246/
• https://blogs.juniper.net/en-us/threat-research/cve-2023-33246-apache-rocketmq-remote-code-execution-vulnerability
• http://www.openwall.com/lists/oss-security/2023/07/12/1

  OSV · Mailing List · Third Party Advisory

• http://packetstormsecurity.com/files/173339/Apache-RocketMQ-5.1.0-Arbitrary-Code-Injection.html

  OSV · VDB Entry · Third Party Advisory · Exploit

• https://nvd.nist.gov/vuln/detail/CVE-2023-33246

  OSV

• https://github.com/apache/rocketmq/commit/9d411cf04a695e7a3f41036e8377b0aa544d754d

  OSV

• https://github.com/apache/rocketmq/commit/c3ada731405c5990c36bf58d50b3e61965300703

  OSV

• https://github.com/advisories/GHSA-x3cq-8f32-5f63

  GitHub

• https://github.com/apache/rocketmq

  OSV

• https://osv.dev/vulnerability/GHSA-x3cq-8f32-5f63

  OSV

• https://osv.dev/vulnerability/CVE-2023-33246

  OSV

• https://github.com/apache/rocketmq/releases/tag/rocketmq-all-4.9.6

  Snyk

• https://github.com/projectdiscovery/nuclei-templates/blob/master/network/cves/2023/CVE-2023-33246.yaml

  Snyk

• https://github.com/SuperZero/CVE-2023-33246

  Snyk

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog

  Snyk

• https://www.vicarius.io/vsociety/posts/rocketmq-rce-cve-2023-33246-33247

  OSV · Third Party Advisory · Exploit

• https://github.com/Malayke/CVE-2023-33246_RocketMQ_RCE_EXPLOIT

  GitHub · Exploit

• https://github.com/jakabakos/CVE-2023-33246_Apache_RocketMQ_RCE

  GitHub · Exploit

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-33246

  OSV · US Government Resource · Third Party Advisory