Lucene search
+L

6 matches found

OSV
OSV
•added 2026/08/18 4:32 p.m.•16 views

GHSA-68MJ-5WR7-6FGG RabbitMQ Java client ValueReader: Oversized LongString/bytes length triggers OOM via unchecked allocation

Summary ValueReader.readBytes allocates a byte array sized by a wire-declared content length without validating it against actual frame data. A malicious AMQP peer triggers OOM by declaring a 2GB string/bytes field. Vulnerable Code src/main/java/com/rabbitmq/client/impl/ValueReader.java lines...

8.7CVSS6.1AI score0.00725EPSS
SaveExploits0References7
Rows per page
Query Builder