Summary
[0.11.0-7.1]
- CVE-2026-44236 librabbitmq: rabbitmq-c: Heap buffer overflow leading to denial of service [rhel-8.10.z]
to denial of service [rhel-8.10.z]
Resolves: RHEL-266750
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | librabbitmq | 0:0.11.0-7.el9_8.1 |
| Oracle Linux · 9 | librabbitmq-devel | 0:0.11.0-7.el9_8.1 |
| Oracle Linux · 9 | librabbitmq-tools | 0:0.11.0-7.el9_8.1 |
Vulnerabilities 1
-
High 7.1
rabbitmq-c: Heap buffer overflow in AMQP login handshake via undersized connection.tune.frame_max
rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to 0.16.0, a malicious AMQP server can send an undersized connection.tune.frame_max value during amqp_login(), and rabbitmq-c accepts the value in amqp_login_inner() in librabbitmq/amqp_socket…