49 matches found
CVE-2026-44235 rabbitmq-c: size_t underflow in AMQP frame length computation leads to out-of-bounds read
rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to 0.16.0, a malicious AMQP server can send an undersized HEADER or METHOD frame during client login and cause unsigned sizet underflow in amqphandleinput in librabbitmq/amqpconnection.c. The parser subtracts HEADERSIZE, fixed...
CVE-2026-44235
rabbitmq-c (a C-language AMQP client library) prior to 0.16.0 contains an unsigned size_t underflow in amqp_handle_input() (librabbitmq/amqp_connection.c). A malicious AMQP server can send an undersized HEADER or METHOD frame during client login, causing the computed encoded.len to wrap to 0xffff...
CVE-2026-44236 rabbitmq-c: Heap buffer overflow in AMQP login handshake via undersized connection.tune.frame_max
rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to 0.16.0, a malicious AMQP server can send an undersized connection.tune.framemax value during amqplogin, and rabbitmq-c accepts the value in amqplogininner in librabbitmq/amqpsocket.c. amqptuneconnection in...
Ubuntu 14.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS / Pro Realtime 22.04 LTS / Pro Realtime 24.04 LTS : rabbitmq-c vulnerabilities (USN-8724-1)
The remote Ubuntu 14.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS / Pro Realtime 22.04 LTS / Pro Realtime 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8724-1 advisory. It was discovered that the rabbitmq-c...
USN-8724-1: rabbitmq-c vulnerabilities
It was discovered that the rabbitmq-c command-line tools only accepted credentials on the command line, making them visible to other local users through the process list. An attacker could possibly use this to obtain sensitive credentials. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04...
Astra Linux – Vulnerability in librabbitmq
A vulnerability was discovered in the C AMQP client library also known as rabbitmq-c for RabbitMQ in versions up to 0.13.0. credentials can only be entered via the command line e.g., for amqp-publish or amqp-consume, and therefore they are visible to local attackers who can list processes along...
ANT-2026-GTGXBRXN · rabbitmq-c · Integer Underflow
integer-underflow medium Severity Claude medium · Security research firm medium · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-GTGXBRXN: sizet underflow in AMQP frame length...
Updated librabbitmq packages fix security vulnerabilities
The updated packages fix security vulnerabilities: An issue was discovered in the C AMQP client library aka rabbitmq-c through 0.13.0 for RabbitMQ. Credentials can only be entered on the command line e.g., for amqp-publish or amqp-consume and are thus visible to local attackers by listing a proce...
PT-2026-69163
It was discovered that the rabbitmq-c command-line tools only accepted credentials on the command line, making them visible to other local users through the process list. An attacker could possibly use this to obtain sensitive credentials. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04...
PT-2026-69162
It was discovered that the rabbitmq-c command-line tools only accepted credentials on the command line, making them visible to other local users through the process list. An attacker could possibly use this to obtain sensitive credentials. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04...
ANT-2026-D7FC4YDQ · rabbitmq-c · Heap-buffer-overflow
heap-buffer-overflow high Severity Claude critical · Security research firm high · Maintainer - Discovered by Claude Opus 4.6 REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-D7FC4YDQ: Heap-buffer-overflow in rabbitmq-c libFuzz...
Ubuntu 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS : rabbitmq-c vulnerabilities (USN-8437-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8437-1 advisory. It was discovered that rabbitmq-c exposed credentials in command-line arguments under certain circumstances. A local...
USN-8437-1 librabbitmq vulnerabilities
It was discovered that rabbitmq-c exposed credentials in command-line arguments under certain circumstances. A local attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. CVE-2023-35789 It was discovered that...
PT-2026-49833
Name of the Vulnerable Software and Affected Versions rabbitmq-c affected versions not specified Description A heap buffer overflow occurs during the AMQP login handshake. This issue is triggered by an undersized connection.tune.frame max value, which can lead to memory corruption when the system...
ROOT-OS-ALPINE-318-CVE-2023-35789 CVE-2023-35789 in rootio-rabbitmq-c - Patched by Root
Root has patched CVE-2023-35789 in the rootio-rabbitmq-c package for Root:Alpine:3.18. Multiple fixed versions available...
EUVD-2019-8339
Malware in sbrugna...
TencentOS Server 4: librabbitmq (TSSA-2025:0136)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0136 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
GHSA-CJ9F-GCWH-7Q49 vulnerabilities
Vulnerabilities for packages: rabbitmq-c...
