RabbitMQ Resource Management Error Vulnerability

🗓️ 25 Oct 2023 00:00:00Reported by China National Vulnerability Database of Information SecurityType

cnnvd

cnnvd🔗 www.cnnvd.org.cn👁 1 Views

Security flaw in RabbitMQ Java client before 5.18.0 allows large messages to trigger memory overflow.

Reporter	Title	Published	Views	Family All 37
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager November 2023 - Multiple CVEs addressed	15 Nov 202313:37	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in RabbitMQ Java Client affects IBM watsonx.data	25 Sep 202419:02	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in RabbitMQ Java Client	29 Nov 202314:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation 2.6.4 fixes multiple security vulnerabilities	15 Dec 202314:31	–	ibm
IBM Security Bulletins	Security Bulletin: The IBM QRadar SIEM RabbitMQ protocol is vulnerable to a denial of service (CVE-2023-46120)	10 May 202415:50	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Golang Go and RabbitMQ Java Client might affect IBM Storage Copy Data Management	14 Jun 202416:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in RabbitMQ Java Client [CVE-2023-46120]	31 Jan 202423:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Dashboards on Cloud Pak for Data 4.8.1 has addressed security vulnerabilities	26 Dec 202321:15	–	ibm
BDU FSTEC	The vulnerability of the client software’s interaction with the RabbitMQ Java client, a broker for messaging services, arises from uncontrolled resource consumption. This allows attackers to cause service failures.	12 Jan 202400:00	–	bdu_fstec
Chainguard	CVE-2023-46120 vulnerabilities	25 Oct 202318:17	–	cgr

Source	Link
github	www.github.com/rabbitmq/rabbitmq-java-client/issues/1062
github	www.github.com/rabbitmq/rabbitmq-java-client/security/advisories/GHSA-mm8h-8587-p46h
github	www.github.com/rabbitmq/rabbitmq-java-client/releases/tag/v5.18.0
github	www.github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8
vigilance	www.vigilance.fr/vulnerability/RabbitMQ-Java-Client-denial-of-service-via-maxBodyLength-44232
cxsecurity	www.cxsecurity.com/cveshow/CVE-2023-46120/

16 Jan 2026 00:00Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.14.9 - 7.5

EPSS0.01095

SSVC

RabbitMQ Java client memory overflow out of memory vulnerability