Medium USN-6501-1 1 CVE

rabbitmq-server vulnerability

Published Nov 21, 2023 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

It was discovered that RabbitMQ incorrectly handled certain HTTP requests.
An attacker could possibly use this issue to cause a denial of service.

Fixed packages 2

Release	Package	Fixed in
Ubuntu · 20.04 LTS 20.04:LTS	rabbitmq-server	3.8.2-0ubuntu1.5
Ubuntu · 22.04 LTS 22.04:LTS	rabbitmq-server	3.9.13-1ubuntu0.22.04.2

Vulnerabilities 1

Medium 4.9

CVE-2023-46118

Denial of Service by publishing large messages over the HTTP API

RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API did not enforce an HTTP request body limit, making it vulnerable for denial of service (DoS) attacks with very large messages. An authenticated user with sufficient credentials can publish …

rabbitmq rabbitmq-server rabbitmq-server rabbitmq-server Debian Ubuntu Azure Linux Hex

Oct 24, 2023

References

report
https://ubuntu.com/security/CVE-2023-46118