91 matches found
RHEL 8 : librabbitmq (RHSA-2023:7150)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:7150 advisory. The librabbitmq packages provide an Advanced Message Queuing Protocol AMQP client library that allows you to communicate with AMQP servers using...
ALSA-2023:7150 Moderate: librabbitmq security update
The librabbitmq packages provide an Advanced Message Queuing Protocol AMQP client library that allows you to communicate with AMQP servers using protocol version 0-9-1. Security Fixes: rabbitmq-c/librabbitmq: Insecure credentials submission CVE-2023-35789 For more details about the security issue...
librabbitmq security update
0.11.0-7 - add missing gating.yaml - fix rpminspect issue Related: 2215766 0.11.0-6 - Resolves: 2215766, insecure credentials submission...
Moderate: Red Hat Security Advisory: librabbitmq security update
An update for librabbitmq is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...
rabbitmq-c/librabbitmq: Insecure credentials submission
A flaw was found in librabbitmq. This issue occurs because credentials can only be entered on the command line for example, for amqp-publish or amqp-consume and are visible to local attackers by listing a process and its arguments...
RHEL 9 : librabbitmq (RHSA-2023:6482)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:6482 advisory. The librabbitmq packages provide an Advanced Message Queuing Protocol AMQP client library that allows you to communicate with AMQP servers using...
ALSA-2023:6482 Moderate: librabbitmq security update
The librabbitmq packages provide an Advanced Message Queuing Protocol AMQP client library that allows you to communicate with AMQP servers using protocol version 0-9-1. Security Fixes: rabbitmq-c/librabbitmq: Insecure credentials submission CVE-2023-35789 For more details about the security issue...
Information Disclosure
librabbitmq.so is vulnerable to Information Disclosure. The vulnerability exists because credentials can only be entered through the command line which allows an attacker to gain access to the sensitive information via listing all process and its arguments...
Oracle Linux 7 : librabbitmq (ELSA-2020-3949)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-3949 advisory. 0.8.0-3 - Resolves: 1809991, CVE-2019-18609 - integer overflow Tenable has extracted the preceding description block directly from the Oracle Linux security...
OESA-2023-1399 librabbitmq security update
This is a C-language AMQP client library for use with AMQP servers speaking protocol versions 0-9-1. Security Fixes: An issue was discovered in the C AMQP client library aka rabbitmq-c through 0.13.0 for RabbitMQ. Credentials can only be entered on the command line e.g., for amqp-publish or...
AZL-43804 CVE-2023-35789 affecting package librabbitmq 0.10.0-4
An issue was discovered in the C AMQP client library aka rabbitmq-c through 0.13.0 for RabbitMQ. Credentials can only be entered on the command line e.g., for amqp-publish or amqp-consume and are thus visible to local attackers by listing a process and its arguments...
new packages: librabbitmq
An update is available for librabbitmq. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...
AlmaLinux 8 : librabbitmq (ALSA-2020:4445)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2020:4445 advisory. - An issue was discovered in amqphandleinput in amqpconnection.c in rabbitmq-c 0.9.0. There is an integer overflow that leads to heap memory corruption in the...
NewStart CGSL CORE 5.05 / MAIN 5.05 : librabbitmq Vulnerability (NS-SA-2021-0163)
The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has librabbitmq packages installed that are affected by a vulnerability: - An issue was discovered in amqphandleinput in amqpconnection.c in rabbitmq-c 0.9.0. There is an integer overflow that leads to heap memory corruption in...
librabbitmq bug fix and enhancement update
An update is available for librabbitmq. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...
ALBA-2021:1587 librabbitmq bug fix and enhancement update
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...
librabbitmq bug fix and enhancement update
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...
NewStart CGSL MAIN 6.02 : librabbitmq Vulnerability (NS-SA-2021-0072)
The remote NewStart CGSL host, running version MAIN 6.02, has librabbitmq packages installed that are affected by a vulnerability: - An issue was discovered in amqphandleinput in amqpconnection.c in rabbitmq-c 0.9.0. There is an integer overflow that leads to heap memory corruption in the handlin...
CentOS 8 : librabbitmq (CESA-2020:4445)
The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4445 advisory. - librabbitmq: integer overflow in amqphandleinput in amqpconnection.c leads to heap-based buffer overflow CVE-2019-18609 Note that Nessus has not tested for th...
Oracle Linux 8 : librabbitmq (ELSA-2020-4445)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4445 advisory. 0.9.0-2 - Resolves: 1809992, CVE-2019-18609 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...