Skip to content
OpenAdvisories
Medium RHSA-2020:0078 2 CVEs

Red Hat Security Advisory: rabbitmq-server security update

Published Sep 16, 2024 · Updated Oct 20, 2026

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · OpenStack 15 openstack:15::el8 rabbitmq-server 0:3.7.22-1.el8ost

Vulnerabilities 2

  • Medium 4.5
    CVE-2019-11287 Public exploit

    RabbitMQ Web Management Plugin DoS via heap overflow

    Pivotal RabbitMQ, versions 3.7.x prior to 3.7.21 and 3.8.x prior to 3.8.1, and RabbitMQ for Pivotal Platform, 1.16.x versions prior to 1.16.7 and 1.17.x versions prior to 1.17.4, contain a web management plugin that is vulnerable to a denial of service attack…

    Pivotal RabbitMQ RabbitMQ for Pivotal Platform rabbitmq-server Debian Ubuntu Hex
  • Low 2.4
    CVE-2019-11281

    RabbitMQ XSS attack

    Pivotal RabbitMQ, versions prior to v3.7.18, and RabbitMQ for PCF, versions 1.15.x prior to 1.15.13, versions 1.16.x prior to 1.16.6, and versions 1.17.x prior to 1.17.3, contain two components, the virtual host limits page, and the federation management UI, …

    Pivotal RabbitMQ RabbitMQ for PCF rabbitmq-server Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1783318
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0078.json
  • report
    https://access.redhat.com/security/cve/CVE-2019-11281
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1764329
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-11281
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-11281
  • article
    https://github.com/rabbitmq/rabbitmq-server/releases/tag/v3.7.18
  • article
    https://pivotal.io/security/cve-2019-11281
  • report
    https://access.redhat.com/security/cve/CVE-2019-11287
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-11287
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-11287
  • article
    https://pivotal.io/security/cve-2019-11287