Out-of-bounds read in Tildeslash Monit - CVE-2019-11455
Published: May 9, 2019
Vulnerability identifier: #VU18413
CSH Severity: Low
CVSS v4: 5.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2019-11455
CWE-ID: CWE-125
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to gain access to potentially sensitive information.
The vulnerability exists due to a boundary condition when processing parameters passed via HTTP GET or POST requests within the Util_urlDecode() function in util.c. A remote authenticated attacker can send a specially crafted HTTP request to the affected application, trigger out-of-bounds read error and read contents of memory.
Affected software
Tildeslash Monit
monit (Ubuntu package)
monit (Alpine package)
monit
Fedora
monit (Ubuntu package)
monit (Alpine package)
monit
Fedora
How to mitigate CVE-2019-11455
Install update from vendor's website.
Tildeslash Monit - update to 5.25.3
monit (Ubuntu package) - addressed in versions 1:5.25.2-1ubuntu0.1, 1:5.25.2-3ubuntu0.1
monit (Alpine package) - addressed in versions 5.24.0-r2, 5.25.2-r0
monit - addressed in versions 5.26.0-1.el7, 5.26.0-1.fc31, 5.26.0-1.fc32
monit (Ubuntu package) - addressed in versions 1:5.25.2-1ubuntu0.1, 1:5.25.2-3ubuntu0.1
monit (Alpine package) - addressed in versions 5.24.0-r2, 5.25.2-r0
monit - addressed in versions 5.26.0-1.el7, 5.26.0-1.fc31, 5.26.0-1.fc32
External References
- https://bitbucket.org/tildeslash/monit/commits/f12d0cdb42d4e74dffe1525d4062c815c48ac57a
- https://github.com/dzflack/exploits/blob/master/macos/monit_dos.py
- https://github.com/dzflack/exploits/blob/master/unix/monit_buffer_overread.py
- https://lists.debian.org/debian-lts-announce/2019/04/msg00028.html
- https://usn.ubuntu.com/3971-1/