Description
An issue was discovered in amqp_handle_input in amqp_connection.c in rabbitmq-c 0.9.0. There is an integer overflow that leads to heap memory corruption in the handling of CONNECTION_STATE_HEADER. A rogue server could return a malicious frame header that leads to a smaller target_size value than needed. This condition is then carried on to a memcpy function that copies too much data into a heap buffer.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | librabbitmq | 0.10.0-1 | — |
| Debian 13 | librabbitmq | 0.10.0-1 | — |
| Debian 12 | librabbitmq | 0.10.0-1 | — |
| Debian 8 | librabbitmq | 0.5.2-2+deb8u1 | DLA-2022-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 18.04 LTS | librabbitmq | 0.8.0-1ubuntu0.18.04.2 | USN-4214-2 |
| Ubuntu 16.04 LTS | librabbitmq | 0.7.1-1ubuntu0.2 | USN-4214-2 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 14.04 LTS | librabbitmq | 0.4.1-1ubuntu0.1~esm1 | USN-4214-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 8 | librabbitmq +1 | 0.9.0-2.el8 | RHSA-2020:4445 |
| RHEL 7 | librabbitmq +2 | 0.8.0-3.el7 | RHSA-2020:3949 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 8 | librabbitmq-devel | 0.9.0-2.el8 | ALSA-2020:4445 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 8 | librabbitmq +1 | 0.9.0-2.el8 | ELSA-2020-4445 |
| Oracle Linux 7 | librabbitmq +2 | 0.8.0-3.el7 | ELSA-2020-3949 |
Advisories 9
- ALSA-2020:4445 Moderate: librabbitmq security update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2020:4445 Red Hat Security Advisory: librabbitmq security update Red Hat Security Advisories (RHSA) · Jun 27, 2026
- RHSA-2020:3949 Red Hat Security Advisory: librabbitmq security update Red Hat Security Advisories (RHSA) · Jun 27, 2026
- USN-4214-1 librabbitmq vulnerability Ubuntu Security Notices (USN) · Apr 22, 2026
- USN-4214-2 librabbitmq vulnerability Ubuntu Security Notices (USN) · Apr 22, 2026
- DLA-2022-1 librabbitmq - security update Debian Security (DSA / DLA) · Mar 9, 2026
- WID-SEC-2026-0012 Red Hat Enterprise Linux: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 5, 2026
- ELSA-2020-4445 Moderate: librabbitmq security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Nov 10, 2020
- ELSA-2020-3949 Moderate: librabbitmq security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Oct 6, 2020
References
- https://github.com/alanxz/rabbitmq-c/blob/master/ChangeLog.md
- https://github.com/alanxz/rabbitmq-c/commit/fc85be7123050b91b054e45b91c78d3241a5047a
- https://news.ycombinator.com/item?id=21681976
- USN-4214-1 vendor-advisory
- [debian-lts-announce] 20191206 [SECURITY] [DLA 2022-1] librabbitmq security update mailing-list
- FEDORA-2019-dd7c8f5435 vendor-advisory
- FEDORA-2019-8730b65158 vendor-advisory
- USN-4214-2 vendor-advisory
- GLSA-202003-07 vendor-advisory