Ubuntu.comUB:CVE-2023-46118CVE-2023-46118
4.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
49.7%
RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API did
not enforce an HTTP request body limit, making it vulnerable for denial of
service (DoS) attacks with very large messages. An authenticated user with
sufficient credentials can publish a very large messages over the HTTP API
and cause target node to be terminated by an “out-of-memory killer”-like
mechanism. This vulnerability has been patched in versions 3.11.24 and
3.12.7.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | rabbitmq-server | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | rabbitmq-server | < 3.8.2-0ubuntu1.5 | UNKNOWN |
| ubuntu | 22.04 | noarch | rabbitmq-server | < 3.9.13-1ubuntu0.22.04.2 | UNKNOWN |
| ubuntu | 23.04 | noarch | rabbitmq-server | < 3.10.8-1.1ubuntu0.1 | UNKNOWN |
| ubuntu | 23.10 | noarch | rabbitmq-server | < 3.12.1-1ubuntu0.1 | UNKNOWN |
| ubuntu | 24.04 | noarch | rabbitmq-server | < 3.12.1-1ubuntu1 | UNKNOWN |
| ubuntu | 16.04 | noarch | rabbitmq-server | < any | UNKNOWN |
Related
4.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
49.7%