4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
49.0%
Severity: Medium
Date : 2021-06-01
CVE-ID : CVE-2021-22116
Package : rabbitmq
Type : denial of service
Remote : Yes
Link : https://security.archlinux.org/AVG-1966
The package rabbitmq before version 3.8.16-1 is vulnerable to denial of
service.
Upgrade to 3.8.16-1.
The problem has been fixed upstream in version 3.8.16.
None.
RabbitMQ all versions prior to 3.8.16 are prone to a denial of service
vulnerability due to improper input validation in AMQP 1.0 client
connection endpoint.
An attacker can exploit the vulnerability by sending malicious AMQP
messages to the target RabbitMQ instance having the AMQP 1.0 plugin
enabled.
A remote attacker could crash the RabbitMQ server through crafted AMQP
messages.
https://tanzu.vmware.com/security/cve-2021-22116
https://security.archlinux.org/CVE-2021-22116
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
49.0%