Shodan

193.32.219.8

Regular View Raw Data
Last Seen: 2024-05-05

GeneralInformation

Hostnames re-pub.me
Domains re-pub.me 
Cloud Provider Yandex
Country Russian Federation
City Moscow
Organization Yandex.Cloud LLC
ISP Yandex.Cloud LLC
ASN AS200350

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-46118 RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API did not enforce an HTTP request body limit, making it vulnerable for denial of service (DoS) attacks with very large messages. An authenticated user with sufficient credentials can publish a very large messages over the HTTP API and cause target node to be terminated by an "out-of-memory killer"-like mechanism. This vulnerability has been patched in versions 3.11.24 and 3.12.7.
CVE-2023-44487 The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2022-31008 RabbitMQ is a multi-protocol messaging and streaming broker. In affected versions the shovel and federation plugins perform URI obfuscation in their worker (link) state. The encryption key used to encrypt the URI was seeded with a predictable secret. This means that in case of certain exceptions related to Shovel and Federation plugins, reasonably easily deobfuscatable data could appear in the node log. Patched versions correctly use a cluster-wide secret for that purpose. This issue has been addressed and Patched versions: `3.10.2`, `3.9.18`, `3.8.32` are available. Users unable to upgrade should disable the Shovel and Federation plugins.
CVE-2021-3618 5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2021-23017 6.8A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

OpenPorts 

1516754379 | 2024-04-29T00:19:43.813519
22 / tcp 
-876677009 | 2024-04-28T22:55:38.030211
80 / tcp 
-2037328890 | 2024-04-23T18:02:40.768517
123 / udp 
-756516755 | 2024-04-20T07:28:28.728946
443 / tcp 
50704379 | 2024-04-24T10:00:30.964620
4369 / tcp 
-352528233 | 2024-05-05T05:31:46.426754
5672 / tcp



Products
Pricing
Contact Us

Shodan ® - All rights reserved