CVE-2026-26449
Description
A flaw was found in Stomper. A remote attacker can send a specially crafted message, specifically a SEND frame missing the destination header field, to the server. This action triggers a null pointer dereference, which is an attempt to access memory that does not exist, causing the server process to crash. This vulnerability leads to a Denial of Service (DoS), making the server unavailable to legitimate users.
Statement
A NULL pointer dereference flaw was found in Stomper. A remote, unauthenticated attacker can exploit this by sending a malformed STOMP SEND frame that omits the required destination header field. When processing the frame, the server attempts to access an invalid memory address, causing the server process to crash immediately. Red Hat default security controls, such as process isolation and non-root execution environments, mitigate the issue by preventing privilege escalation or arbitrary code execution beyond a Denial of Service against the message broker.
Mitigation
Limit exposure by configuring network firewalls or security groups to restrict STOMP server access to trusted clients only. If supported by an intermediate proxy or API gateway, inspect and drop incoming STOMP frames that lack mandatory header fields before they reach the broker.
Understanding the Weakness (CWE)
Availability
Technical Impact: DoS: Crash, Exit, or Restart
NULL pointer dereferences usually result in the failure of the process unless exception handling (on some platforms) is available and implemented. Even when exception handling is being used, it can still be very difficult to return the software to a safe state of operation.
Integrity,Confidentiality
Technical Impact: Execute Unauthorized Code or Commands; Read Memory; Modify Memory
In rare circumstances, when NULL is equivalent to the 0x0 memory address and privileged code can access it, then writing or reading memory is possible, which may lead to code execution.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
