RabbitMQ all versions prior to 3.8.16 are prone to a denial of service vulnerability due to improper input validation in AMQP 1.0 client connection endpoint. A malicious user can exploit the vulnerability by sending malicious AMQP messages to the target RabbitMQ instance having the AMQP 1.0 plugin enabled.
CPE | Name | Operator | Version |
---|---|---|---|
debian_linux | eq | 9.0 | |
rabbitmq | lt | 3.8.16 |