Every CVE Search/ Get API key

CVE-2019-18609

An issue was discovered in amqp_handle_input in amqp_connection.c in rabbitmq-c 0.9.0. There is...

9.8 CriticalFix available

An issue was discovered in amqp_handle_input in amqp_connection.c in rabbitmq-c 0.9.0. There is an integer overflow that leads to heap memory corruption in the handling of CONNECTION_STATE_HEADER. A rogue server could return a malicious frame header that leads to a smaller target_size value than needed. This condition is then carried on to a memcpy function that copies too much data into a heap buffer.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

3.32%Up 1.6 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 9.8

An issue was discovered in amqp_handle_input in amqp_connection.c in rabbitmq-c 0.9.0. There is an integer overflow that leads to heap memory corruption in the handling of CONNECTION_STATE_HEADER. A rogue server could return a malicious frame header that leads to a smaller target_size value than needed. This condition is then carried on to a memcpy function that copies too much data into a heap buffer.

Record
CVE-2019-18609
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-787
Updated
2026-11-02
CVE List No score

An issue was discovered in amqp_handle_input in amqp_connection.c in rabbitmq-c 0.9.0. There is an integer overflow that leads to heap memory corruption in the handling of CONNECTION_STATE_HEADER. A rogue server could return a malicious frame header that leads to a smaller target_size value than needed. This condition is then carried on to a memcpy function that copies too much data into a heap buffer.

Record
CVE-2019-18609
Updated
2026-11-02
EUVDEUVD-2019-8339 No score

An issue was discovered in amqp_handle_input in amqp_connection.c in rabbitmq-c 0.9.0. There is an integer overflow that leads to heap memory corruption in the handling of CONNECTION_STATE_HEADER. A rogue server could return a malicious frame header that leads to a smaller target_size value than needed. This condition is then carried on to a memcpy function that copies too much data into a heap buffer.

Record
EUVD-2019-8339
Updated
2026-11-03
GitHub AdvisoriesGHSA-356h-gg7j-mwv3 No score

An issue was discovered in amqp_handle_input in amqp_connection.c in rabbitmq-c 0.9.0. There is...

An issue was discovered in amqp_handle_input in amqp_connection.c in rabbitmq-c 0.9.0. There is an integer overflow that leads to heap memory corruption in the handling of CONNECTION_STATE_HEADER. A rogue server could return a malicious frame header that leads to a smaller target_size value than needed. This condition is then carried on to a memcpy function that copies too much data into a heap buffer.

Record
GHSA-356h-gg7j-mwv3
Weakness
CWE-190, CWE-787
Updated
2026-11-02
OSVBELL-CVE-2019-18609 9.8

CVE-2019-18609 does not affect BellSoft software

Record
BELL-CVE-2019-18609
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 9.8

An issue was discovered in amqp_handle_input in amqp_connection.c in rabbitmq-c 0.9.0. There is an integer overflow that leads to heap memory corruption in the handling of CONNECTION_STATE_HEADER. A rogue server could return a malicious frame header that leads to a smaller target_size value than needed. This condition is then carried on to a memcpy function that copies too much data into a heap buffer.

Record
CVE-2019-18609
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 8 moreShow less
OSVDEBIAN-CVE-2019-18609 9.8

An issue was discovered in amqp_handle_input in amqp_connection.c in rabbitmq-c 0.9.0. There is an integer overflow that leads to heap memory corruption in the handling of CONNECTION_STATE_HEADER. A rogue server could return a malicious frame header that leads to a smaller target_size value than needed. This condition is then carried on to a memcpy function that copies too much data into a heap buffer.

Record
DEBIAN-CVE-2019-18609
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2020:3949 8.6

Red Hat Security Advisory: librabbitmq security update

Record
RHSA-2020:3949
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Updated
2026-11-02
OSVRHSA-2020:4445 8.6

Red Hat Security Advisory: librabbitmq security update

Record
RHSA-2020:4445
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2019-18609 9.8

An issue was discovered in amqp_handle_input in amqp_connection.c in rabbitmq-c 0.9.0. There is an integer overflow that leads to heap memory corruption in the handling of CONNECTION_STATE_HEADER. A rogue server could return a malicious frame header that leads to a smaller target_size value than needed. This condition is then carried on to a memcpy function that copies too much data into a heap buffer.

Record
UBUNTU-CVE-2019-18609
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2020:4445 No score

Moderate: librabbitmq security update

The librabbitmq packages provide an Advanced Message Queuing Protocol (AMQP) client library that allows you to communicate with AMQP servers using protocol version 0-9-1.

Security Fix(es):

  • librabbitmq: integer overflow in amqp_handle_input in amqp_connection.c leads to heap-based buffer overflow (CVE-2019-18609)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2020:4445
Updated
2026-11-02
OSVopenSUSE-SU-2024:11293-1 No score

librabbitmq-devel-0.11.0-2.3 on GA media

These are all security issues fixed in the librabbitmq-devel-0.11.0-2.3 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11293-1
Updated
2026-11-02
OSVUSN-4214-1 No score

librabbitmq vulnerability

It was discovered that RabbitMQ incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code.

Record
USN-4214-1
Updated
2026-11-02
OSVUSN-4214-2 No score

librabbitmq vulnerability

USN-4214-1 fixed a vulnerability in RabbitMQ. This update provides the corresponding updates for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.

Original advisory details:

It was discovered that RabbitMQ incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code.

Record
USN-4214-2
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
librabbitmq-devel
AlmaLinux:8
 before 0.9.0-2.el8
0.9.0-2.el8
librabbitmq
Debian:12
 before 0.10.0-1
0.10.0-1
librabbitmq
Debian:13
 before 0.10.0-1
0.10.0-1
librabbitmq
Debian:14
 before 0.10.0-1
0.10.0-1
librabbitmq
Debian:8
 before 0.5.2-2+deb8u1, plus listed versions
0.5.2-2
0.5.2-2+deb8u1
librabbitmq
Red Hat:enterprise_linux:7::computenode
 before 0:0.8.0-3.el7
0:0.8.0-3.el7
librabbitmq-debuginfo
Red Hat:enterprise_linux:7::computenode
 before 0:0.8.0-3.el7
0:0.8.0-3.el7
librabbitmq-devel
Red Hat:enterprise_linux:7::computenode
 before 0:0.8.0-3.el7
0:0.8.0-3.el7
librabbitmq-examples
Red Hat:enterprise_linux:7::computenode
 before 0:0.8.0-3.el7
0:0.8.0-3.el7
librabbitmq
Red Hat:enterprise_linux:7::server
 before 0:0.8.0-3.el7
0:0.8.0-3.el7
Show 18 moreShow less
Affected packages
PackageAffectedFixed
librabbitmq-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:0.8.0-3.el7
0:0.8.0-3.el7
librabbitmq-devel
Red Hat:enterprise_linux:7::server
 before 0:0.8.0-3.el7
0:0.8.0-3.el7
librabbitmq-examples
Red Hat:enterprise_linux:7::server
 before 0:0.8.0-3.el7
0:0.8.0-3.el7
librabbitmq
Red Hat:enterprise_linux:7::workstation
 before 0:0.8.0-3.el7
0:0.8.0-3.el7
librabbitmq-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:0.8.0-3.el7
0:0.8.0-3.el7
librabbitmq-devel
Red Hat:enterprise_linux:7::workstation
 before 0:0.8.0-3.el7
0:0.8.0-3.el7
librabbitmq-examples
Red Hat:enterprise_linux:7::workstation
 before 0:0.8.0-3.el7
0:0.8.0-3.el7
librabbitmq
Red Hat:enterprise_linux:8::baseos
 before 0:0.9.0-2.el8
0:0.9.0-2.el8
librabbitmq-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:0.9.0-2.el8
0:0.9.0-2.el8
librabbitmq-debugsource
Red Hat:enterprise_linux:8::baseos
 before 0:0.9.0-2.el8
0:0.9.0-2.el8
librabbitmq-tools-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:0.9.0-2.el8
0:0.9.0-2.el8
librabbitmq-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:0.9.0-2.el8
0:0.9.0-2.el8
librabbitmq-debugsource
Red Hat:enterprise_linux:8::crb
 before 0:0.9.0-2.el8
0:0.9.0-2.el8
librabbitmq-devel
Red Hat:enterprise_linux:8::crb
 before 0:0.9.0-2.el8
0:0.9.0-2.el8
librabbitmq-tools-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:0.9.0-2.el8
0:0.9.0-2.el8
librabbitmq
Ubuntu:Pro:14.04:LTS
 before 0.4.1-1ubuntu0.1~esm1, plus listed versions
0.3.0-10.4.1-1
0.4.1-1ubuntu0.1~esm1
librabbitmq
Ubuntu:16.04:LTS
 before 0.7.1-1ubuntu0.2, plus listed versions
0.5.2-20.7.1-10.7.1-1ubuntu0.1
0.7.1-1ubuntu0.2
librabbitmq
Ubuntu:18.04:LTS
 before 0.8.0-1ubuntu0.18.04.2, plus listed versions
0.8.0-10.8.0-1build10.8.0-1ubuntu0.18.04.1
0.8.0-1ubuntu0.18.04.2

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2019-18609 is a critical vulnerability (CVSS 9.8) in Rabbitmq-c Project Rabbitmq-c, published December 1, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.32%, the 88th percentile. Fixed in librabbitmq-devel 0.9.0-2.el8.

References

Show 24 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open