CVE-2017-11408

Wireshark AMQP dissector (versions 2.0.0–2.0.13 and 2.2.0–2.2.7) is affected by CVE-2017-11408 due to an insufficient check during AMQP list dissection in epan/dissectors/packet-amqp.c, which could crash the dissector. The issue causes a denial of service when processing crafted packets; upstream...

CVE-2017-11408

In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the AMQP dissector could crash. This was addressed in epan/dissectors/packet-amqp.c by checking for successful list dissection...

CVE-2017-11408

In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the AMQP dissector could crash. This was addressed in epan/dissectors/packet-amqp.c by checking for successful list dissection...

CVE-2017-11408

In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the AMQP dissector could crash. This was addressed in epan/dissectors/packet-amqp.c by checking for successful list dissection...

CVE-2017-11408: Improper Input Validation

In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the AMQP dissector could crash. This was addressed in epan/dissectors/packet-amqp.c by checking for successful list dissection...

KLA11072 Multiple vulnerabilities in Wireshark

Multiple serious vulnerabilities have been found in Wireshark. Malicious users can exploit these vulnerabilities to cause a denial of service. Below is a complete list of vulnerabilities: 1. Multiple unspecified vulnerabilities in the AMQP and MQ dissectors can be exploited remotely via a special...

PT-2017-11989

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.0.0 through 2.0.13 Wireshark versions 2.2.0 through 2.2.7 Description The issue concerns a crash in the AMQP dissector. This was resolved by adding a check for successful list dissection in the epan/dissectors/packet-amqp....

Regular Expression Denial Of Service (ReDoS)

amqp-match is vulnerable to regular expression denial of service ReDoS attacks. These attacks can be triggered when the .match function is used to identify routing tokens in a long string...

CVE-2016-2173

org.springframework.core.serializer.DefaultDeserializer in Spring AMQP before 1.5.5 allows remote attackers to execute arbitrary code...

Code injection

org.springframework.core.serializer.DefaultDeserializer in Spring AMQP before 1.5.5 allows remote attackers to execute arbitrary code...

CVE-2016-2173

org.springframework.core.serializer.DefaultDeserializer in Spring AMQP before 1.5.5 allows remote attackers to execute arbitrary code...

CVE-2016-2173

org.springframework.core.serializer.DefaultDeserializer in Spring AMQP before 1.5.5 allows remote attackers to execute arbitrary code...

CVE-2016-2173

org.springframework.core.serializer.DefaultDeserializer in Spring AMQP before 1.5.5 allows remote attackers to execute arbitrary code...

CVE-2016-2173

CVE-2016-2173 (Spring AMQP) affects the Spring AMQP component, where org.springframework.core.serializer.DefaultDeserializer can be abused to achieve remote code execution. The vulnerability is present in Spring AMQP versions prior to 1.5.5. Exploitation involves deserialization of untrusted data...

CVE-2016-2173: Improper Input Validation

org.springframework.core.serializer.DefaultDeserializer in Spring AMQP before 1.5.5 allows remote attackers to execute arbitrary code...

PT-2017-2111

Name of the Vulnerable Software and Affected Versions Spring AMQP versions prior to 1.5.5 Description The issue is related to insufficient input validation in the org.springframework.core.serializer.DefaultDeserializer component of the Spring AMQP application for RabbitMQ message exchange. This...

Exploit for Improper Input Validation in Fedoraproject Fedora

CVE-2016-2173 - Remote Code Execution in Spring AMQP - App Tes...

[SECURITY] Fedora 25 Update: rabbitmq-server-3.6.6-2.fc25

RabbitMQ is an implementation of AMQP, the emerging standard for high performance enterprise messaging. The RabbitMQ server is a robust and scalable implementation of an AMQP broker...

Moderate: Red Hat Security Advisory: rabbitmq-server security and bug fix update

An update for rabbitmq-server is now available for Red Hat Enterprise Linux OpenStack Platform 7.0 Kilo for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...

Moderate: Red Hat Security Advisory: rabbitmq-server security and bug fix update

An update for rabbitmq-server is now available for Red Hat Enterprise Linux OpenStack Platform 6.0 Juno for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...