Lucene search
GoogleOSV:BIT-2023-46118HistoryNov 02, 2023 - 7:26 a.m.
BIT-2023-46118
2023-11-0207:26:18
Google
osv.dev
133
rabbitmq multi-protocol broker
http dos vulnerability
out-of-memory killer
RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API did not enforce an HTTP request body limit, making it vulnerable for denial of service (DoS) attacks with very large messages. An authenticated user with sufficient credentials can publish a very large messages over the HTTP API and cause target node to be terminated by an “out-of-memory killer”-like mechanism. This vulnerability has been patched in versions 3.11.24 and 3.12.7.
Related
openvas
openvas
Debian: Security Advisory (DLA-3687-1)
2023-12-14 00:00:00
Debian: Security Advisory (DSA-5571-1)
2023-12-04 00:00:00
openSUSE: Security Advisory for rabbitmq (SUSE-SU-2023:4939-1)
2024-03-04 00:00:00
debian
debian
[SECURITY] [DLA 3687-1] rabbitmq-server security update
2023-12-13 22:14:58
[SECURITY] [DSA 5571-1] rabbitmq-server security update
2023-12-01 20:29:42
prion
prion
Design/Logic Flaw
2023-10-25 18:17:00
osv
osv
rabbitmq-server - security update
2023-12-13 00:00:00
rabbitmq-server - security update
2023-12-01 00:00:00
CVE-2023-46118
2023-10-25 18:17:36
redhat
redhat
ubuntu
ubuntu
RabbitMQ vulnerability
2023-11-21 00:00:00
veracode
veracode
Denial Of Service (DoS)
2023-11-28 15:34:54
nessus
nessus
SUSE SLES15 / openSUSE 15 Security Update : rabbitmq-server (SUSE-SU-2023:4939-1)
2023-12-21 00:00:00
RHEL 9 : Red Hat OpenStack Platform 17.1 (rabbitmq-server) (RHSA-2024:0217)
2024-01-16 00:00:00
Debian DLA-3687-1 : rabbitmq-server - LTS security update
2023-12-14 00:00:00
cbl_mariner
cbl_mariner
nvd
nvd
CVE-2023-46118
2023-10-25 18:17:36
cvelist
cvelist
ubuntucve
ubuntucve
CVE-2023-46118
2023-10-25 00:00:00
cve
cve
CVE-2023-46118
2023-10-25 18:17:36
redhatcve
redhatcve
CVE-2023-46118
2023-10-27 07:45:08
debiancve
debiancve
CVE-2023-46118
2023-10-25 18:17:36