Moderate: Red Hat Security Advisory: rabbitmq-server security update

An update for rabbitmq-server is now available for Red Hat Enterprise Linux OpenStack Platform 5.0 Icehouse for RHEL 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Moderate: Red Hat Security Advisory: rabbitmq-server security and bug fix update

An update for rabbitmq-server is now available for Red Hat Enterprise Linux OpenStack Platform 5.0 Icehouse for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Denial Of Service (DoS)

ActiveMQ AMQP is vulnerable to denial of service attacks. These attacks can be conducted by opening TCP connections to a SSL port and just keeping it open. This blocks other users from accessing it...

Moderate: Red Hat Security Advisory: rabbitmq-server security update

An update for rabbitmq-server is now available for Red Hat OpenStack Platform 8.0 Liberty. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Debian DSA-3761-1 : rabbitmq-server - security update

It was discovered that RabbitMQ, an implementation of the AMQP protocol, didn't correctly validate MQTT MQ Telemetry Transport connection authentication. This allowed anyone to login to an existing user account without having to provide a password. %NASLMINLEVEL 70300 C Tenable Network Security,...

[SECURITY] [DSA 3761-1] rabbitmq-server security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3761-1 [email protected] https://www.debian.org/security/ Sebastien Delafond January 13, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3761-1] rabbitmq-server security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3761-1 [email protected] https://www.debian.org/security/ Sebastien Delafond January 13, 2017 https://www.debian.org/security/faq -...

Debian Security Advisory DSA 3761-1 (rabbitmq-server - security update)

It was discovered that RabbitMQ, an implementation of the AMQP protocol, didn OpenVAS Vulnerability Test $Id: deb3761.nasl 6607 2017-07-07 12:04:25Z cfischer $ Auto-generated from advisory DSA 3761-1 using nvtgen 1.0 Script version: 1.0 Author: Greenbone Networks Copyright: Copyright c 2017...

[SECURITY] Fedora 25 Update: qpid-java-6.0.4-5.fc25

Qpid Java offers an AMQP-fluent implementation of JMS and a message broker written in Java that stores, routes, and forwards messages using AMQP...

Debian: Security Advisory (DSA-3761-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RabbitMQ Server Detection (AMPQ)

Advanced Message Queuing Protocol AMQP based detection of RabbitMQ Server. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-4974

Apache Qpid AMQP 0-x JMS client before 6.0.4 and JMS AMQP 1.0 before 0.10.0 does not restrict the use of classes available on the classpath, which might allow remote authenticated users with permission to send messages to deserialize arbitrary objects and execute arbitrary code by leveraging a...

UBUNTU-CVE-2016-4974

Apache Qpid AMQP 0-x JMS client before 6.0.4 and JMS AMQP 1.0 before 0.10.0 does not restrict the use of classes available on the classpath, which might allow remote authenticated users with permission to send messages to deserialize arbitrary objects and execute arbitrary code by leveraging a...

Design/Logic Flaw

Apache Qpid AMQP 0-x JMS client before 6.0.4 and JMS AMQP 1.0 before 0.10.0 does not restrict the use of classes available on the classpath, which might allow remote authenticated users with permission to send messages to deserialize arbitrary objects and execute arbitrary code by leveraging a...

CVE-2016-4974

Apache Qpid AMQP 0-x JMS client before 6.0.4 and JMS AMQP 1.0 before 0.10.0 does not restrict the use of classes available on the classpath, which might allow remote authenticated users with permission to send messages to deserialize arbitrary objects and execute arbitrary code by leveraging a...

CVE-2016-4974

Apache Qpid AMQP 0-x JMS client before 6.0.4 and JMS AMQP 1.0 before 0.10.0 does not restrict the use of classes available on the classpath, which might allow remote authenticated users with permission to send messages to deserialize arbitrary objects and execute arbitrary code by leveraging a...

CVE-2016-4974

CVE-2016-4974 affects Apache Qpid AMQP 0-x JMS client prior to 6.0.4 and JMS (AMQP 1.0) prior to 0.10.0. The root cause is insufficient restriction of classes on the classpath, allowing remote authenticated users to deserialize arbitrary objects via a crafted JMS ObjectMessage handled by getObjec...

CVE-2016-4974

Apache Qpid AMQP 0-x JMS client before 6.0.4 and JMS AMQP 1.0 before 0.10.0 does not restrict the use of classes available on the classpath, which might allow remote authenticated users with permission to send messages to deserialize arbitrary objects and execute arbitrary code by leveraging a...

PT-2016-6203

Name of the Vulnerable Software and Affected Versions Apache Qpid AMQP 0-x JMS client versions prior to 6.0.4 Apache Qpid JMS AMQP 1.0 versions prior to 0.10.0 Description The issue allows remote authenticated users with permission to send messages to deserialize arbitrary objects and execute...

CVE-2016-4974: Improper Input Validation

Apache Qpid AMQP 0-x JMS client before 6.0.4 and JMS AMQP 1.0 before 0.10.0 does not restrict the use of classes available on the classpath, which might allow remote authenticated users with permission to send messages to deserialize arbitrary objects and execute arbitrary code by leveraging a...