rpm package
opensuse/rabbitmq-server&distro=openSUSE Leap 15.4
pkg:rpm/opensuse/rabbitmq-server&distro=openSUSE%20Leap%2015.4
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2023-46118 | — | < 3.8.11-150300.3.14.1 | 3.8.11-150300.3.14.1 | Oct 24, 2023 | RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API did not enforce an HTTP request body limit, making it vulnerable for denial of service (DoS) attacks with very large messages. An authenticated user with sufficient credentials can publish a very large messages | ||
| CVE-2022-31008 | — | < 3.8.11-150300.3.11.1 | 3.8.11-150300.3.11.1 | Oct 6, 2022 | RabbitMQ is a multi-protocol messaging and streaming broker. In affected versions the shovel and federation plugins perform URI obfuscation in their worker (link) state. The encryption key used to encrypt the URI was seeded with a predictable secret. This means that in case of ce |
- CVE-2023-46118Oct 24, 2023affected < 3.8.11-150300.3.14.1fixed 3.8.11-150300.3.14.1
RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API did not enforce an HTTP request body limit, making it vulnerable for denial of service (DoS) attacks with very large messages. An authenticated user with sufficient credentials can publish a very large messages
- CVE-2022-31008Oct 6, 2022affected < 3.8.11-150300.3.11.1fixed 3.8.11-150300.3.11.1
RabbitMQ is a multi-protocol messaging and streaming broker. In affected versions the shovel and federation plugins perform URI obfuscation in their worker (link) state. The encryption key used to encrypt the URI was seeded with a predictable secret. This means that in case of ce