80 matches found
CVE-2026-115297
NULL Pointer Dereference CWE-476 in the AMQP protocol parser in Packetbeat can lead to denial of service via specially crafted network traffic. An unauthenticated attacker who can send traffic on a network segment that Packetbeat monitors for AMQP can cause a Go runtime panic that terminates the...
EUVD-2026-116077
NULL Pointer Dereference CWE-476 in the AMQP protocol parser in Packetbeat can lead to denial of service via specially crafted network traffic. An unauthenticated attacker who can send traffic on a network segment that Packetbeat monitors for AMQP can cause a Go runtime panic that terminates the...
CVE-2026-115297
A NULL Pointer Dereference (CWE-476) vulnerability in the AMQP protocol parser of Packetbeat allows an unauthenticated attacker to cause a Go runtime panic , leading to a Denial of Service (DoS) . A single specially crafted packet sent on a monitored network segment is sufficient to terminate the...
CVE-2026-115297 NULL Pointer Dereference in Packetbeat Leading to Denial of Service
NULL Pointer Dereference CWE-476 in the AMQP protocol parser in Packetbeat can lead to denial of service via specially crafted network traffic. An unauthenticated attacker who can send traffic on a network segment that Packetbeat monitors for AMQP can cause a Go runtime panic that terminates the...
CVE-2026-115297 NULL Pointer Dereference in Packetbeat Leading to Denial of Service
NULL Pointer Dereference CWE-476 in the AMQP protocol parser in Packetbeat can lead to denial of service via specially crafted network traffic. An unauthenticated attacker who can send traffic on a network segment that Packetbeat monitors for AMQP can cause a Go runtime panic that terminates the...
Packetbeat 8.19.24, 9.4.9, 9.5.6 Security Update (ESA-2026-208)
NULL Pointer Dereference in Packetbeat Leading to Denial of Service NULL Pointer Dereference CWE-476 in the AMQP protocol parser in Packetbeat can lead to denial of service via specially crafted network traffic. An unauthenticated attacker who can send traffic on a network segment that Packetbeat...
io.quarkiverse.artemis:quarkus-test-artemis (>=3.12.0, <=3.14.3), net.oneandone.ioc-unit:ioc-unit-jms-artemisactivemq (>=6.0.0, <=6.0.1) +35 more potentially affected by CVE-2026-49362 via org.apache.artemis:artemis-server (>=2.50.0, <=2.56.0)
org.apache.artemis:artemis-server MAVEN version =2.50.0, =3.12.0, =6.0.0, =2.50.0, =2.50.0, =2.50.0, =2.50.0, =2.50.0, =2.50.0, =2.50.0, =2.50.0, =2.50.0, =2.50.0, =2.50.0, =2.50.0, =2.50.0, =2.56.0 and more Source cves: CVE-2026-49362 Source advisory: SNYK:JAVA-ORGAPACHEARTEMIS-20186767...
io.quarkiverse.artemis:quarkus-test-artemis (>=3.12.0, <=3.14.3), net.oneandone.ioc-unit:ioc-unit-jms-artemisactivemq (>=6.0.0, <=6.0.1) +35 more potentially affected by CVE-2026-49364 via org.apache.artemis:artemis-server (>=2.50.0, <=2.56.0)
org.apache.artemis:artemis-server MAVEN version =2.50.0, =3.12.0, =6.0.0, =2.50.0, =2.50.0, =2.50.0, =2.50.0, =2.50.0, =2.50.0, =2.50.0, =2.50.0, =2.50.0, =2.50.0, =2.50.0, =2.50.0, =2.50.0, =2.56.0 and more Source cves: CVE-2026-49364 Source advisory: SNYK:JAVA-ORGAPACHEARTEMIS-20159297...
io.quarkiverse.artemis:quarkus-test-artemis (>=3.12.0, <=3.14.3), net.oneandone.ioc-unit:ioc-unit-jms-artemisactivemq (>=6.0.0, <=6.0.1) +35 more potentially affected by CVE-2026-49364 via org.apache.artemis:artemis-server (>=2.50.0, <=2.56.0)
org.apache.artemis:artemis-server MAVEN version =2.50.0, =3.12.0, =6.0.0, =2.50.0, =2.50.0, =2.50.0, =2.50.0, =2.50.0, =2.50.0, =2.50.0, =2.50.0, =2.50.0, =2.50.0, =2.50.0, =2.50.0, =2.50.0, =2.56.0 and more Source cves: CVE-2026-49364 Source advisory: MEND:CVE-2026-49364...
CVE-2026-79921
amqp091-go is a Go client library for the AMQP 0-9-1 protocol. Before v1.13.0 , a compromised or malicious AMQP broker can force the client to allocate and process content body frames that exceed the negotiated frame_max limit, bypassing the protocol's built-in framing constraints. This leads to ...
DEBIAN-CVE-2026-69219
The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.1, src/main/java/com/rabbitmq/client/impl/ValueReader.java uses ValueReader.readBytes to accept a wire-declared contentLength below Integer.MAXVALUE and allocate a...
DEBIAN-CVE-2026-63335
The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.31.0, inbound AMQP command assembly in src/main/java/com/rabbitmq/client/impl/CommandAssembler.java processes a content-bearing method and header whose...
CVE-2026-61634
The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.0, the AMQP connection tuning path records the negotiated AMQP framemax value, but src/main/java/com/rabbitmq/client/impl/SocketFrameHandler.java and...
GHSA-5XWG-CFVJ-GFF5 RabbitMQ Java client accepts broker frames larger than the negotiated AMQP frame_max
Summary The max body size was enforced to patch CVE-2023-46120, but even though that limit still works, the frame size itself still exceeds the given max size. Root cause The Java client records the AMQP 0-9-1 framemax negotiated during connection tuning, but the socket inbound frame reader...
CVE-2026-61634
The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.0, the AMQP connection tuning path records the negotiated AMQP framemax value, but src/main/java/com/rabbitmq/client/impl/SocketFrameHandler.java and...
RabbitMQ Java client ValueReader: Unbounded recursive table/array nesting causes StackOverflowError DoS
Summary ValueReader.readTable and readArray recursively call readFieldValue with no depth limit. A malicious AMQP peer can crash the client JVM by sending a deeply nested table structure. Vulnerable Code src/main/java/com/rabbitmq/client/impl/ValueReader.java lines 139-155 and 237-249: java priva...
CVE-2026-69219
The vulnerability is in ValueReader.readBytes in ValueReader.java of the RabbitMQ Java client prior to 5.33.1: it allocates a byte array based on a wire-declared length before verifying available frame data, allowing a malicious AMQP peer to trigger a ~2 GB allocation and OutOfMemoryError during ...
PT-2026-77213
Name of the Vulnerable Software and Affected Versions RabbitMQ Java client library versions prior to 5.33.1 Description An issue exists where the ValueReader.readBytes function in src/main/java/com/rabbitmq/client/impl/ValueReader.java allocates a byte array based on a wire-declared contentLength...
CVE-2026-57218 RabbitMQ: AMQP 0-9-1 in combination with OAuth 2: consumer persistence can lead to post-revocation message disclosure
RabbitMQ is a messaging and streaming broker. Prior to 4.2.6, RabbitMQ AMQP 0-9-1 allows an existing consumer to keep receiving messages after OAuth token expiry or connection.updatesecret refresh to reduced scopes because existing consumers are not canceled or reauthorized at delivery time after...
