Lucene search
+L

7 matches found

OSV
OSV
•added 2026/09/17 5:04 p.m.•21 views

GHSA-R9C8-GCJP-XFWH RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation

Summary A flaw in the recvContent function allows a malicious AMQP server to trigger an Out-of-Memory OOM error, forcing the host operating system or container runtime to immediately terminate the client process. Vulnerability Details When receiving message content payloads, the client processes...

8.9CVSS5.9AI score0.00524EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2026/09/17 5:04 p.m.•14 views

RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation

Summary A flaw in the recvContent function allows a malicious AMQP server to trigger an Out-of-Memory OOM error, forcing the host operating system or container runtime to immediately terminate the client process. Vulnerability Details When receiving message content payloads, the client processes...

8.9CVSS5.9AI score0.00524EPSS
SaveExploits0References6Affected Software1
NVD
NVD
•added 2026/09/16 3:17 p.m.•16 views

CVE-2026-77410

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, Channel.recvContent in channel.go preallocates the message body slice with the uint64 ch.header.Size value supplied by an AMQP content header without capping the allocation to the negotiated Connection.Config.FrameSize value. A...

8.9CVSS0.00524EPSS
SaveExploits0References4
OSV
OSV
•added 2026/09/16 3:17 p.m.•11 views

AZL-103299 CVE-2026-77410 affecting package telegraf 1.31.0-33

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, Channel.recvContent in channel.go preallocates the message body slice with the uint64 ch.header.Size value supplied by an AMQP content header without capping the allocation to the negotiated Connection.Config.FrameSize value. A...

8.9CVSS6AI score0.00524EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/16 3:17 p.m.•12 views

DEBIAN-CVE-2026-77410

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, Channel.recvContent in channel.go preallocates the message body slice with the uint64 ch.header.Size value supplied by an AMQP content header without capping the allocation to the negotiated Connection.Config.FrameSize value. A...

8.9CVSS6AI score0.00524EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/16 2:39 p.m.•18 views

CVE-2026-77410 RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, Channel.recvContent in channel.go preallocates the message body slice with the uint64 ch.header.Size value supplied by an AMQP content header without capping the allocation to the negotiated Connection.Config.FrameSize value. A...

8.9CVSS6AI score0.00524EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/16 12:00 a.m.•4 views

PT-2026-93800

Name of the Vulnerable Software and Affected Versions RabbitMQ amqp091-go versions prior to 1.13.0 Description A flaw in the recvContent function allows a malicious or compromised AMQP broker to trigger an Out-of-Memory OOM error, which is a state where the system lacks enough memory to perform...

8.9CVSS5.8AI score0.00524EPSS
SaveExploits0References20
Rows per page
Query Builder