Summary
[0.9.0-6]
- CVE-2026-44236 librabbitmq: rabbitmq-c: Heap buffer overflow leading to denial of service [rhel-8.10.z]
leading to denial of service [rhel-8.10.z]
- Resolves: RHEL-266743
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | librabbitmq | 0:0.9.0-6.el8_10 |
| Oracle Linux · 8 | librabbitmq-devel | 0:0.9.0-6.el8_10 |
| Oracle Linux · 8 | librabbitmq-tools | 0:0.9.0-6.el8_10 |
Vulnerabilities 1
-
High 7.1
rabbitmq-c: Heap buffer overflow in AMQP login handshake via undersized connection.tune.frame_max
rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to 0.16.0, a malicious AMQP server can send an undersized connection.tune.frame_max value during amqp_login(), and rabbitmq-c accepts the value in amqp_login_inner() in librabbitmq/amqp_socket…