Summary
It was discovered that RabbitMQ incorrectly handled certain inputs.
An attacker could possibly use this issue to cause a denial of service. This
issue only affected Ubuntu 16.04 ESM and Ubuntu 18.04 LTS. (CVE-2019-11287)
Jonathan Knudsen discovered RabbitMQ incorrectly handled certain inputs.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2021-22116)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | rabbitmq-server | 3.6.10-1ubuntu0.5 |
| Ubuntu · 20.04 LTS 20.04:LTS | rabbitmq-server | 3.8.2-0ubuntu1.3 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | rabbitmq-server | 3.5.7-1ubuntu0.16.04.4+esm1 |
Vulnerabilities 2
-
Medium 4.5CVE-2019-11287 Public exploit
RabbitMQ Web Management Plugin DoS via heap overflow
Pivotal RabbitMQ, versions 3.7.x prior to 3.7.21 and 3.8.x prior to 3.8.1, and RabbitMQ for Pivotal Platform, 1.16.x versions prior to 1.16.7 and 1.17.x versions prior to 1.17.4, contain a web management plugin that is vulnerable to a denial of service attack…
-
Unscored —
RabbitMQ all versions prior to 3.8.16 are prone to a denial of service vulnerability due to improper input validation i…