Summary
It was discovered that rabbitmq-c exposed credentials in command-line
arguments under certain circumstances. A local attacker could possibly use
this issue to obtain sensitive information. This issue only affected Ubuntu
22.04 LTS and Ubuntu 24.04 LTS. (CVE-2023-35789)
It was discovered that rabbitmq-c incorrectly handled AMQP frame lengths
under certain circumstances, which could lead to an out-of-bounds read. A
remote attacker could possibly use this issue to cause rabbitmq-c to crash,
resulting in a denial of service. (CVE-2026-44235)
It was discovered that rabbitmq-c incorrectly handled AMQP login handshakes
under certain circumstances, which could lead to a heap buffer overflow. A
remote attacker could possibly use this issue to cause rabbitmq-c to crash,
resulting in a denial of service, or execute arbitrary code.
(CVE-2026-44236)
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | librabbitmq | 0.10.0-1ubuntu2.1 |
| Ubuntu · 24.04 LTS 24.04:LTS | librabbitmq | 0.11.0-1ubuntu0.1 |
| Ubuntu · 25.10 | librabbitmq | 0.15.0-1ubuntu0.25.10.1 |
| Ubuntu · 26.04 LTS 26.04:LTS | librabbitmq | 0.15.0-1ubuntu0.26.04.1 |
Vulnerabilities 3
-
High 7.1
rabbitmq-c: Heap buffer overflow in AMQP login handshake via undersized connection.tune.frame_max
rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to 0.16.0, a malicious AMQP server can send an undersized connection.tune.frame_max value during amqp_login(), and rabbitmq-c accepts the value in amqp_login_inner() in librabbitmq/amqp_socket…
-
Medium 6.5
rabbitmq-c: size_t underflow in AMQP frame length computation leads to out-of-bounds read
rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to 0.16.0, a malicious AMQP server can send an undersized HEADER or METHOD frame during client login and cause unsigned size_t underflow in amqp_handle_input() in librabbitmq/amqp_connection.c…
-
Unscored —
An issue was discovered in the C AMQP client library (aka rabbitmq-c) through 0.13.0 for RabbitMQ. Credentials can only…