最近收到服务器漏洞RabbitMQ代码注入漏洞(CVE-2021-22117) ,一直不知道自己的服务器有装这个软件,就查看了下服务,果然后这个
[root@~]# systemctl status rabbitmq-server
● rabbitmq-server.service - LSB: Enable AMQP service provided by RabbitMQ broker
Loaded: loaded (/etc/rc.d/init.d/rabbitmq-server; bad; vendor preset: disable
Active: active (running) since Fri 2022-09-02 04:02:52 CST; 4 weeks 1 days ag
Docs: man:systemd-sysv-generator(8)
Process: 1773 ExecStart=/etc/rc.d/init.d/rabbitmq-server start (code=exited, s
Tasks: 3
CGroup: /system.slice/rabbitmq-server.service
├─2012 /bin/sh /etc/rc.d/init.d/rabbitmq-server start
├─2056 /bin/bash -c ulimit -S -c 0 >/dev/null 2>&1 ; /usr/sbin/rabbit
└─2058 /bin/sh /usr/sbin/rabbitmq-server
按照下面文章进行升级。
RabbitMQ3.8.16复制命令下载安装即可_聊Java的博客-CSDN博客
结果出现报错
rpm -ivh erlang-23.3.4.11-1.el7.x86_64.rpm
warning: erlang-23.3.4.11-1.el7.x86_64.rpm: Header V4 RSA/SHA1 Signature, key ID
Preparing... ################################# [100%]
file /usr/lib64/erlang/bin/epmd from install of erlang-23.3.4.11-1.el7.x-1.el6.x86_64
file /usr/lib64/erlang/bin/erl from install of erlang-23.3.4.11-1.el7.x81.el6.x86_64
把ivh 改为Uvh 安装成功。
可发现系统无法启动
# rpm -Uvh rabbitmq-server-3.8.16-1.el7.noarch.rpm
warning: rabbitmq-server-3.8.16-1.el7.noarch.rpm: Header V4 RSA/SHA512 Signature
Preparing... ################################# [100%]
Updating / installing...
1:rabbitmq-server-3.8.16-1.el7 ################################# [ 50%]
Cleaning up / removing...
2:rabbitmq-server-3.6.10-1.el6 ################################# [100%]
[root@jt Rabbitmq]# rabbitmq-server start &
sudo rabbitmqctl status | grep rabbit
Status of node rabbit@jttxyxmyyfw ...
Node name: rabbit@jttxyxmyyfw
Enabled plugin file: /etc/rabbitmq/enabled_plugins
* rabbitmq_management
* rabbitmq_web_dispatch
* rabbitmq_management_agent
Node data directory: /var/lib/rabbitmq/mnesia/rabbit@jttxyxmyyfw
Raft data directory: /var/lib/rabbitmq/mnesia/rabbit@jttxyxmyyfw/quorum/rabbit@j
* /var/log/rabbitmq/rabbit@jttxyxmyyfw.log
* /var/log/rabbitmq/rabbit@jttxyxmyyfw_upgrade.log
[root@jttxyxmyyfw Rabbitmq]# systemctl status rabbitmq-server
● rabbitmq-server.service - RabbitMQ broker
Loaded: loaded (/usr/lib/systemd/system/rabbitmq-server.service; disabled; ve
Active: inactive (dead)
然后重启无法启动
systemctl start rabbitmq-server
Gracefully halting Erlang VM
Job for rabbitmq-server.service failed because the control process exited with ece" and "journalctl -xe" for details.
卸载重装还是如此,最后重启还是提示命令没有发现
sytemctl status rabbitmq-server
-bash: sytemctl: command not found
查看一些文章
rabbitmqctl 命令执行报错 command not found问题解决_高压锅_1220的博客-CSDN博客_linux下rabbitmqctl命令不可用
结果还是不行,后来我想是不是其他问题,后面看到这篇文章
rabbitmqctl: command not found_catch-exception的博客-CSDN博客
结果发现有两个版本都在
/usr/lib/rabbitmq
rabbitmq_server-3.6.10 rabbitmq_server-3.8.16
进入到3.8.16版本下
Memory
Total memory used: 0.0916 gb
Calculation strategy: rss
Memory high watermark setting: 0.4 of available memory, computed to: 6.6626 gb
other_proc: 0.0329 gb (32.97 %)
code: 0.0283 gb (28.37 %)
other_system: 0.0166 gb (16.65 %)
allocated_unused: 0.0149 gb (14.99 %)
other_ets: 0.0034 gb (3.4 %)
atom: 0.0015 gb (1.46 %)
plugins: 0.0013 gb (1.34 %)
binary: 0.0002 gb (0.24 %)
metrics: 0.0002 gb (0.23 %)
mgmt_db: 0.0002 gb (0.18 %)
mnesia: 0.0001 gb (0.09 %)
quorum_ets: 0.0 gb (0.05 %)
msg_index: 0.0 gb (0.03 %)
connection_other: 0.0 gb (0.0 %)
connection_channels: 0.0 gb (0.0 %)
connection_readers: 0.0 gb (0.0 %)
connection_writers: 0.0 gb (0.0 %)
queue_procs: 0.0 gb (0.0 %)
queue_slave_procs: 0.0 gb (0.0 %)
quorum_queue_procs: 0.0 gb (0.0 %)
reserved_unallocated: 0.0 gb (0.0 %)
File Descriptors
Total: 2, limit: 65439
Sockets: 0, limit: 58893
Free Disk Space
Low free disk space watermark: 0.05 gb
Free disk space: 4.7726 gb
Totals
Connection count: 0
Queue count: 0
Virtual host count: 1
Listeners
Interface: [::], port: 15672, protocol: http, purpose: HTTP API
Interface: [::], port: 25672, protocol: clustering, purpose: inter-node and CLI tool communication
Interface: [::], port: 5672, protocol: amqp, purpose: AMQP 0-9-1 and AMQP 1.0
[root@jttxyxmyyfw sbin]# systemctl status rabbitmq-server
● rabbitmq-server.service - RabbitMQ broker
Loaded: loaded (/usr/lib/systemd/system/rabbitmq-server.service; disabled; vendor preset: disabled)
Active: inactive (dead)
Oct 01 11:55:32 jttxyxmyyfw rabbitmq-server[5499]: /var/log/rabbitmq/rabbit@j...
Oct 01 11:55:32 jttxyxmyyfw rabbitmq-server[5499]: Config file(s): (none)
Oct 01 11:55:33 jttxyxmyyfw rabbitmq-server[5499]: Starting broker... complet...
Oct 01 11:55:33 jttxyxmyyfw systemd[1]: Started RabbitMQ broker.
Oct 01 12:04:33 jttxyxmyyfw systemd[1]: Stopping RabbitMQ broker...
Oct 01 12:04:33 jttxyxmyyfw rabbitmqctl[19425]: Shutting down RabbitMQ node ...9
Oct 01 12:04:34 jttxyxmyyfw rabbitmq-server[5499]: Gracefully halting Erlang VM
Oct 01 12:04:34 jttxyxmyyfw rabbitmqctl[19425]: Waiting for PID 5499 to term...e
Oct 01 12:04:38 jttxyxmyyfw rabbitmqctl[19425]: RabbitMQ node rabbit@jttxyxm...n
Oct 01 12:04:38 jttxyxmyyfw systemd[1]: Stopped RabbitMQ broker.
Hint: Some lines were ellipsized, use -l to show in full.
[root@jttxyxmyyfw sbin]# systemctl start rabbitmq-server
Gracefully halting Erlang VM
Job for rabbitmq-server.service failed because the control process exited with error code. See "systemctl status rabbitmq-server.service" and "journalctl -xe" for details.
[1]+ Done rabbitmq-server start (wd: /home/jttweb/Rabbitmq)
(wd now: /usr/lib/rabbitmq/lib/rabbitmq_server-3.8.16/sbin)
发现这些都是好的
/usr/local/bin
在该路径下做软连接。
ln -s /usr/lib/rabbitmq/lib/rabbitmq_server-3.8.16/sbin/rabbitmqctl rabbitmqctl
然后再使配置文件生效,发现问题解决。
[root@bin]# source /etc/profile
[root@ bin]# systemctl status rabbitmq-server
● rabbitmq-server.service - RabbitMQ broker
Loaded: loaded (/usr/lib/systemd/system/rabbitmq-server.service; disabled; vendor preset: disabled)
Active: active (running) since Sat 2022-10-01 12:57:08 CST; 6min ago
Process: 12986 ExecStop=/usr/sbin/rabbitmqctl shutdown (code=exited, status=0/SUCCESS)
Main PID: 13518 (beam.smp)
Status: "Initialized"
Tasks: 35