6 matches found
MiracleLinux 8 : librabbitmq-0.9.0-2.el8 (AXSA:2021-1184:01)
The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2021-1184:01 advisory. librabbitmq: integer overflow in amqphandleinput in amqpconnection.c leads to heap-based buffer overflow CVE-2019-18609 Tenable has extracted the preceding...
Alibaba Cloud Linux 3 : 0059: librabbitmq (ALINUX3-SA-2024:0059)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2024:0059 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2023-35789: An issue was discovered in the C AM...
Debian dla-4096 : amqp-tools - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4096 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4096-1 [email protected] https://www.debian.org/lts/security/...
Information Disclosure
librabbitmq.so is vulnerable to Information Disclosure. The vulnerability exists because credentials can only be entered through the command line which allows an attacker to gain access to the sensitive information via listing all process and its arguments...
AZL-43804 CVE-2023-35789 affecting package librabbitmq 0.10.0-4
An issue was discovered in the C AMQP client library aka rabbitmq-c through 0.13.0 for RabbitMQ. Credentials can only be entered on the command line e.g., for amqp-publish or amqp-consume and are thus visible to local attackers by listing a process and its arguments...
USN-4214-2 librabbitmq vulnerability
USN-4214-1 fixed a vulnerability in RabbitMQ. This update provides the corresponding updates for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: It was discovered that RabbitMQ incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary cod...