RabbitMQ: Schwachstelle ermöglicht Denial of Service

Summary

Product

Vulnerabilities 1

• Medium 4.9
  CVE-2023-46118

  Denial of Service by publishing large messages over the HTTP API

  RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API did not enforce an HTTP request body limit, making it vulnerable for denial of service (DoS) attacks with very large messages. An authenticated user with sufficient credentials can publish …

  rabbitmq rabbitmq-server rabbitmq-server rabbitmq-server Debian Ubuntu Azure Linux Hex
  Oct 24, 2023

Revision history

1. 2026-06-30 #10

   Referenz(en) aufgenommen: EUVD-2023-50377

2. 2025-06-30 #9

   Neue Updates von Dell aufgenommen

3. 2024-10-15 #8

   Neue Updates aufgenommen

4. 2024-08-05 #7

   Neue Updates von HITACHI aufgenommen

5. 2024-01-16 #6

   Neue Updates von Red Hat aufgenommen

6. 2023-12-20 #5

   Neue Updates von SUSE aufgenommen

7. 2023-12-13 #4

   Neue Updates von Debian aufgenommen

8. 2023-12-03 #3

   Neue Updates von Debian aufgenommen

9. 2023-11-21 #2

   Neue Updates von Ubuntu aufgenommen

10. 2023-10-26 #1

    Initiale Fassung

References

• Red Hat Bugtracker vom 2023-10-26
  https://bugzilla.redhat.com/show_bug.cgi?id=2246512
• GitHub Advisory Database vom 2023-10-26
  https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-w6cq-9cf4-gqpg
• Ubuntu Security Notice USN-6501-1 vom 2023-11-21
  https://ubuntu.com/security/notices/USN-6501-1
• Debian Security Advisory DSA-5571 vom 2023-12-01
  https://lists.debian.org/debian-security-announce/2023/msg00267.html
• Debian Security Advisory DLA-3687 vom 2023-12-13
  https://lists.debian.org/debian-lts-announce/2023/12/msg00009.html
• SUSE Security Update SUSE-SU-2023:4939-1 vom 2023-12-20
  https://lists.suse.com/pipermail/sle-security-updates/2023-December/017508.html
• Red Hat Security Advisory RHSA-2024:0217 vom 2024-01-17
  https://access.redhat.com/errata/RHSA-2024:0217
• Hitachi Vulnerability Information HITACHI-SEC-2024-137 vom 2024-08-06
  https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2024-137/index.html
• SolarWinds Platform 2024.4 release notes vom 2024-10-16
  https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2024-4_release_notes.htm
• Dell Security Advisory DSA-2025-234 vom 2025-07-01
  https://www.dell.com/support/kbdoc/000337969