Summary
[0.14.0-3.1]
- CVE-2026-44236 librabbitmq: rabbitmq-c: Heap buffer overflow leading to denial of service [rhel-8.10.z]
denial of service [rhel-8.10.z]
Resolves: RHEL-266736
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | librabbitmq | 0:0.14.0-3.el10_2.1 |
| Oracle Linux · 10 | librabbitmq-devel | 0:0.14.0-3.el10_2.1 |
| Oracle Linux · 10 | librabbitmq-tools | 0:0.14.0-3.el10_2.1 |
Vulnerabilities 1
-
High 7.1
rabbitmq-c: Heap buffer overflow in AMQP login handshake via undersized connection.tune.frame_max
rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to 0.16.0, a malicious AMQP server can send an undersized connection.tune.frame_max value during amqp_login(), and rabbitmq-c accepts the value in amqp_login_inner() in librabbitmq/amqp_socket…