{"id":"CVE-2019-18609","aliases":["ALSA-2020:4445","BELL-CVE-2019-18609","DEBIAN-CVE-2019-18609","DLA-2022-1","EUVD-2019-8339","GHSA-356h-gg7j-mwv3","RHSA-2020:3949","RHSA-2020:4445","UBUNTU-CVE-2019-18609","USN-4214-1","USN-4214-2","openSUSE-SU-2024:11293-1"],"status":"published","title":"An issue was discovered in amqp_handle_input in amqp_connection.c in rabbitmq-c 0.9.0. There is...","description":"An issue was discovered in amqp_handle_input in amqp_connection.c in rabbitmq-c 0.9.0. There is an integer overflow that leads to heap memory corruption in the handling of CONNECTION_STATE_HEADER. A rogue server could return a malicious frame header that leads to a smaller target_size value than needed. This condition is then carried on to a memcpy function that copies too much data into a heap buffer.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.03317,"percentile":0.8866,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190","CWE-787"],"published":"2019-12-01T21:50:08Z","modified":"2026-10-29T11:00:18Z","fixes":[{"ecosystem":"AlmaLinux:8","package":"librabbitmq-devel","fixed_in":["0.9.0-2.el8"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"librabbitmq","fixed_in":["0.10.0-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"librabbitmq","fixed_in":["0.10.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"librabbitmq","fixed_in":["0.10.0-1"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"librabbitmq","fixed_in":["0.5.2-2+deb8u1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"librabbitmq","fixed_in":["0:0.8.0-3.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"librabbitmq-debuginfo","fixed_in":["0:0.8.0-3.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"librabbitmq-devel","fixed_in":["0:0.8.0-3.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"librabbitmq-examples","fixed_in":["0:0.8.0-3.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"librabbitmq","fixed_in":["0:0.8.0-3.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"librabbitmq-debuginfo","fixed_in":["0:0.8.0-3.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"librabbitmq-devel","fixed_in":["0:0.8.0-3.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"librabbitmq-examples","fixed_in":["0:0.8.0-3.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"librabbitmq","fixed_in":["0:0.8.0-3.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"librabbitmq-debuginfo","fixed_in":["0:0.8.0-3.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"librabbitmq-devel","fixed_in":["0:0.8.0-3.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"librabbitmq-examples","fixed_in":["0:0.8.0-3.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"librabbitmq","fixed_in":["0:0.9.0-2.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"librabbitmq-debuginfo","fixed_in":["0:0.9.0-2.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"librabbitmq-debugsource","fixed_in":["0:0.9.0-2.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"librabbitmq-tools-debuginfo","fixed_in":["0:0.9.0-2.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"librabbitmq-debuginfo","fixed_in":["0:0.9.0-2.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"librabbitmq-debugsource","fixed_in":["0:0.9.0-2.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"librabbitmq-devel","fixed_in":["0:0.9.0-2.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"librabbitmq-tools-debuginfo","fixed_in":["0:0.9.0-2.el8"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"librabbitmq","fixed_in":["0.4.1-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"librabbitmq","fixed_in":["0.7.1-1ubuntu0.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"librabbitmq","fixed_in":["0.8.0-1ubuntu0.18.04.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"librabbitmq-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.0-2.el8"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"librabbitmq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.0-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"librabbitmq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"librabbitmq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.0-1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"librabbitmq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.2-2+deb8u1"}]}],"versions":["0.5.2-2"]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"librabbitmq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.0-3.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"librabbitmq-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.0-3.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"librabbitmq-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.0-3.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"librabbitmq-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.0-3.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"librabbitmq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.0-3.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"librabbitmq-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.0-3.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"librabbitmq-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.0-3.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"librabbitmq-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.0-3.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"librabbitmq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.0-3.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"librabbitmq-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.0-3.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"librabbitmq-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.0-3.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"librabbitmq-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.0-3.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"librabbitmq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.0-2.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"librabbitmq-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.0-2.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"librabbitmq-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.0-2.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"librabbitmq-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.0-2.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"librabbitmq-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.0-2.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"librabbitmq-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.0-2.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"librabbitmq-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.0-2.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"librabbitmq-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.0-2.el8"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"librabbitmq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.1-1ubuntu0.1~esm1"}]}],"versions":["0.3.0-1","0.4.1-1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"librabbitmq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.1-1ubuntu0.2"}]}],"versions":["0.5.2-2","0.7.1-1","0.7.1-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"librabbitmq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.0-1ubuntu0.18.04.2"}]}],"versions":["0.8.0-1","0.8.0-1build1","0.8.0-1ubuntu0.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"librabbitmq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.1-1ubuntu0.1~esm1"}]}],"versions":["0.3.0-1","0.4.1-1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"librabbitmq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.1-1ubuntu0.2"}]}],"versions":["0.5.2-2","0.7.1-1","0.7.1-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"librabbitmq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.0-1ubuntu0.18.04.2"}]}],"versions":["0.8.0-1","0.8.0-1build1","0.8.0-1ubuntu0.18.04.1"]}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"rabbitmq-c_project","product":"rabbitmq-c"}],"references":[{"url":"https://github.com/alanxz/rabbitmq-c/blob/master/ChangeLog.md","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","report"]},{"url":"https://github.com/alanxz/rabbitmq-c/commit/fc85be7123050b91b054e45b91c78d3241a5047a","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://news.ycombinator.com/item?id=21681976","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://usn.ubuntu.com/4214-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/12/msg00004.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WA7CPNVYMF6OQNIYNLWUY6U2GTKFOKH3/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XQER6XTKYMHNQR7QTHW7DJAH645WQROU/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://usn.ubuntu.com/4214-2/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/202003-07","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-18609","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WA7CPNVYMF6OQNIYNLWUY6U2GTKFOKH3/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XQER6XTKYMHNQR7QTHW7DJAH645WQROU/"},{"url":"https://github.com/advisories/GHSA-356h-gg7j-mwv3"},{"url":"https://vulners.com/cve/CVE-2019-18609","tags":["report"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2019-18609","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-18609","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:3949","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.9_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1786646","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3949.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-18609","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-18609","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2020:4445","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.3_release_notes/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4445.json","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-18609","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4214-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-4214-2","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2019-18609","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2019-18609","description":"An issue was discovered in amqp_handle_input in amqp_connection.c in rabbitmq-c 0.9.0. There is an integer overflow that leads to heap memory corruption in the handling of CONNECTION_STATE_HEADER. A rogue server could return a malicious frame header that leads to a smaller target_size value than needed. This condition is then carried on to a memcpy function that copies too much data into a heap buffer.","status":"published","published":"2019-12-01T21:50:08Z","modified":"2024-08-05T01:54:14.437Z","updated_at":"2026-11-02T14:32:23.485011Z"}],"euvd":[{"id":"EUVD-2019-8339","description":"An issue was discovered in amqp_handle_input in amqp_connection.c in rabbitmq-c 0.9.0. There is an integer overflow that leads to heap memory corruption in the handling of CONNECTION_STATE_HEADER. A rogue server could return a malicious frame header that leads to a smaller target_size value than needed. This condition is then carried on to a memcpy function that copies too much data into a heap buffer.","status":"published","published":"2019-12-01T21:50:08Z","modified":"2024-08-05T01:54:14Z","updated_at":"2026-11-03T02:40:27.733219Z"}],"ghsa":[{"id":"GHSA-356h-gg7j-mwv3","title":"An issue was discovered in amqp_handle_input in amqp_connection.c in rabbitmq-c 0.9.0. There is...","description":"An issue was discovered in amqp_handle_input in amqp_connection.c in rabbitmq-c 0.9.0. There is an integer overflow that leads to heap memory corruption in the handling of CONNECTION_STATE_HEADER. A rogue server could return a malicious frame header that leads to a smaller target_size value than needed. This condition is then carried on to a memcpy function that copies too much data into a heap buffer.","status":"published","published":"2022-05-24T17:02:24Z","modified":"2023-01-28T05:07:50Z","cwes":["CWE-190","CWE-787"],"updated_at":"2026-11-02T14:44:34.529278Z"}],"nvd":[{"id":"CVE-2019-18609","description":"An issue was discovered in amqp_handle_input in amqp_connection.c in rabbitmq-c 0.9.0. There is an integer overflow that leads to heap memory corruption in the handling of CONNECTION_STATE_HEADER. A rogue server could return a malicious frame header that leads to a smaller target_size value than needed. This condition is then carried on to a memcpy function that copies too much data into a heap buffer.","status":"published","published":"2019-12-01T22:15:10.897Z","modified":"2026-06-17T02:25:09.263Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:05:38.993437Z"}],"osv":[{"id":"BELL-CVE-2019-18609","title":"CVE-2019-18609 does not affect BellSoft software","status":"withdrawn","published":"2019-12-01T22:15:00Z","modified":"2026-01-26T09:47:05.774544Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:15.340685Z"},{"id":"CVE-2019-18609","description":"An issue was discovered in amqp_handle_input in amqp_connection.c in rabbitmq-c 0.9.0. There is an integer overflow that leads to heap memory corruption in the handling of CONNECTION_STATE_HEADER. A rogue server could return a malicious frame header that leads to a smaller target_size value than needed. This condition is then carried on to a memcpy function that copies too much data into a heap buffer.","status":"published","published":"2019-12-01T22:15:10.897Z","modified":"2026-10-20T13:45:05.912489892Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:11.673963Z"},{"id":"DEBIAN-CVE-2019-18609","description":"An issue was discovered in amqp_handle_input in amqp_connection.c in rabbitmq-c 0.9.0. There is an integer overflow that leads to heap memory corruption in the handling of CONNECTION_STATE_HEADER. A rogue server could return a malicious frame header that leads to a smaller target_size value than needed. This condition is then carried on to a memcpy function that copies too much data into a heap buffer.","status":"published","published":"2019-12-01T22:15:10.897Z","modified":"2026-09-21T07:02:32.187213335Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:31.867036Z"},{"id":"RHSA-2020:3949","title":"Red Hat Security Advisory: librabbitmq security update","status":"published","published":"2024-09-16T03:51:33Z","modified":"2026-06-27T10:11:20Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"RHSA-2020:4445","title":"Red Hat Security Advisory: librabbitmq security update","status":"published","published":"2024-09-16T03:51:41Z","modified":"2026-06-27T10:12:02Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"UBUNTU-CVE-2019-18609","description":"An issue was discovered in amqp_handle_input in amqp_connection.c in rabbitmq-c 0.9.0. There is an integer overflow that leads to heap memory corruption in the handling of CONNECTION_STATE_HEADER. A rogue server could return a malicious frame header that leads to a smaller target_size value than needed. This condition is then carried on to a memcpy function that copies too much data into a heap buffer.","status":"published","published":"2019-12-01T22:15:00Z","modified":"2026-04-22T12:14:07.875163Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:20.325378Z"},{"id":"ALSA-2020:4445","title":"Moderate: librabbitmq security update","description":"The librabbitmq packages provide an Advanced Message Queuing Protocol (AMQP) client library that allows you to communicate with AMQP servers using protocol version 0-9-1.\n\nSecurity Fix(es):\n\n* librabbitmq: integer overflow in amqp_handle_input in amqp_connection.c leads to heap-based buffer overflow (CVE-2019-18609)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2020-11-03T12:05:26Z","modified":"2026-10-29T11:00:18.781517794Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"DLA-2022-1","title":"librabbitmq - security update","status":"published","published":"2019-12-06T00:00:00Z","modified":"2026-03-09T01:20:24.129993Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"openSUSE-SU-2024:11293-1","title":"librabbitmq-devel-0.11.0-2.3 on GA media","description":"These are all security issues fixed in the librabbitmq-devel-0.11.0-2.3 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:30:02.270432Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"USN-4214-1","title":"librabbitmq vulnerability","description":"It was discovered that RabbitMQ incorrectly handled certain inputs.\nAn attacker could possibly use this issue to execute arbitrary code.\n","status":"published","published":"2019-12-05T14:15:21Z","modified":"2026-04-22T09:50:07.532515Z","updated_at":"2026-11-02T16:58:14.547547Z"},{"id":"USN-4214-2","title":"librabbitmq vulnerability","description":"USN-4214-1 fixed a vulnerability in RabbitMQ. This update provides\nthe corresponding updates for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.\n\nOriginal advisory details:\n\n It was discovered that RabbitMQ incorrectly handled certain inputs.\n An attacker could possibly use this issue to execute arbitrary code.\n","status":"published","published":"2019-12-11T16:53:39Z","modified":"2026-04-22T09:49:36.81671Z","updated_at":"2026-11-02T16:58:14.547547Z"}]}}