CVE:CVE-2019-11287
CNNVD:CNNVD-201911-1307
Pivotal Software RabbitMQ是美国Pivotal Software公司的一套实现了高级消息队列协议（AMQP）的开源消息代理软件。
Pivotal Software RabbitMQ中的Web管理插件存在安全漏洞。攻击者可通过插入恶意的Erlang格式化字符串利用该漏洞造成服务器崩溃。以下产品及版本受到影响：Pivotal Software RabbitMQ 3.7.21之前的3.7.x版本，3.8.1之前的3.8.x版本；RabbitMQ for Pivotal Platform 1.16.7之前的1.16.x版本，1.17.4之前的1.17.x版本。
solution:Upgrade pivotal_software rabbitmq to a higher version than 1.16.7,1.17.4,3.7.21,and avoid the version [1.16.0,1.16.7),[1.17.0,1.17.4),[3.7.0,3.7.21); Upgrade vmware rabbitmq to a higher version than 3.8.1,and avoid the version [3.8.0,3.8.1); Upgrade fedoraproject fedora to a higher version than 30,31,and avoid the version 30,31; Upgrade redhat openstack to a higher version than 15,and avoid the version 15; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0