{"id":"CVE-2026-61547","aliases":["DEBIAN-CVE-2026-61547","MGASA-2026-0397","OESA-2026-3308","UBUNTU-CVE-2026-61547","USN-8724-1"],"status":"published","title":"Updated librabbitmq packages fix security vulnerabilities","description":"amqp_decode_bytes size_t integer overflow bypasses bounds check on\n32-bit (OOB read). (CVE-2026-59986)\nHeap Buffer Overflow in amqp_send_frame() When Serializing Oversized\nAMQP_FRAME_BODY. (CVE-2026-61547)","severity":{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"high","from":"osv"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2026-07-28T16:52:48.341754987Z","modified":"2026-09-21T10:00:32Z","fixes":[{"ecosystem":"Debian:12","package":"librabbitmq","fixed_in":["0.11.0-1+deb12u3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"librabbitmq","fixed_in":["0.15.0-1+deb13u2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"librabbitmq","fixed_in":["0.17.0-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"librabbitmq","fixed_in":["0.7.1-1ubuntu0.2+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"librabbitmq","fixed_in":["0.8.0-1ubuntu0.18.04.2+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"librabbitmq","fixed_in":["0.10.0-1ubuntu0.20.04.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"librabbitmq","fixed_in":["0.10.0-1ubuntu2.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"librabbitmq","fixed_in":["0.11.0-1ubuntu0.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"librabbitmq","fixed_in":["0.15.0-1ubuntu0.26.04.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"librabbitmq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.11.0-1+deb12u3"}]}],"versions":["0.11.0-1","0.11.0-1+deb12u1","0.11.0-1+deb12u2"]},{"source":"osv","ecosystem":"Debian:13","package":"librabbitmq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.0-1+deb13u2"}]}],"versions":["0.15.0-1","0.15.0-1+deb13u1"]},{"source":"osv","ecosystem":"Debian:14","package":"librabbitmq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.17.0-1"}]}],"versions":["0.15.0-1","0.16.0-1"]},{"source":"osv","ecosystem":"Mageia:10","package":"librabbitmq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.0-2.2.mga10"}]}],"bundled":2},{"source":"osv","ecosystem":"Mageia:9","package":"librabbitmq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.11.0-1.2.mga9"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"librabbitmq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.0-9.oe2003sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"librabbitmq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.0-11.oe2203sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"librabbitmq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.0-4.oe2403sp1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"librabbitmq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.0-4.oe2403sp3"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP4","package":"librabbitmq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.0-4.oe2403sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"librabbitmq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.1-1ubuntu0.2+esm1"}]}],"versions":["0.5.2-2","0.7.1-1","0.7.1-1ubuntu0.1","0.7.1-1ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"librabbitmq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.0-1ubuntu0.18.04.2+esm1"}]}],"versions":["0.8.0-1","0.8.0-1build1","0.8.0-1ubuntu0.18.04.1","0.8.0-1ubuntu0.18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"librabbitmq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.0-1ubuntu0.20.04.1~esm1"}]}],"versions":["0.9.0-0.2","0.9.0-0.2ubuntu1","0.10.0-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"librabbitmq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.0-1ubuntu2.2"}]}],"versions":["0.10.0-1","0.10.0-1build1","0.10.0-1ubuntu1","0.10.0-1ubuntu2","0.10.0-1ubuntu2.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"librabbitmq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.11.0-1ubuntu0.2"}]}],"versions":["0.11.0-1","0.11.0-1build1","0.11.0-1build2","0.11.0-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"librabbitmq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.0-1ubuntu0.26.04.2"}]}],"versions":["0.15.0-1build1","0.15.0-1build2","0.15.0-1ubuntu0.26.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"librabbitmq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.1-1ubuntu0.1~esm2"}]}],"versions":["0.3.0-1","0.4.1-1","0.4.1-1ubuntu0.1~esm1"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"librabbitmq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.1-1ubuntu0.2+esm1"}]}],"versions":["0.5.2-2","0.7.1-1","0.7.1-1ubuntu0.1","0.7.1-1ubuntu0.2"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"librabbitmq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.0-1ubuntu0.18.04.2+esm1"}]}],"versions":["0.8.0-1","0.8.0-1build1","0.8.0-1ubuntu0.18.04.1","0.8.0-1ubuntu0.18.04.2"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"librabbitmq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.0-1ubuntu0.20.04.1~esm1"}]}],"versions":["0.9.0-0.2","0.9.0-0.2ubuntu1","0.10.0-1"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"librabbitmq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.0-1ubuntu2.2"}]}],"versions":["0.10.0-1","0.10.0-1build1","0.10.0-1ubuntu1","0.10.0-1ubuntu2","0.10.0-1ubuntu2.1"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"librabbitmq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.11.0-1ubuntu0.2"}]}],"versions":["0.11.0-1","0.11.0-1build1","0.11.0-1build2","0.11.0-1ubuntu0.1"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"librabbitmq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.0-1ubuntu0.26.04.2"}]}],"versions":["0.15.0-1build1","0.15.0-1build2","0.15.0-1ubuntu0.26.04.1"],"bundled":5}],"references":[{"url":"https://security-tracker.debian.org/tracker/CVE-2026-61547","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0397.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=36189","tags":["report"]},{"url":"https://lists.debian.org/debian-security-announce/2026/msg00358.html","tags":["web"]},{"url":"https://github.com/alanxz/rabbitmq-c/security/advisories/GHSA-jgjf-7fwf-f3c7","tags":["advisory"]},{"url":"https://github.com/alanxz/rabbitmq-c/security/advisories/GHSA-hfjv-vcp3-39wh","tags":["advisory","report"]},{"url":"https://ubuntu.com/security/notices/USN-8724-1","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3308","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59986","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-61547","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-61547","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-61547","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-35789","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-44235","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-44236","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-59986","tags":["report"]}],"sources":{"osv":[{"id":"OESA-2026-3308","title":"librabbitmq security update","description":"This is a C-language AMQP client library for use with AMQP servers speaking protocol versions 0-9-1.\r\n\r\nSecurity Fix(es):\n\nCVE-2026-59986 is a security vulnerability affecting the librabbitmq library. Specific details of the vulnerability have not been disclosed. librabbitmq is the C client library for RabbitMQ messaging middleware.(CVE-2026-59986)\n\nCVE-2026-61547 is a security vulnerability in librabbitmq (RabbitMQ C client library). Details of the vulnerability have not been disclosed yet, and all versions are affected.(CVE-2026-61547)","status":"published","published":"2026-08-07T02:45:33Z","modified":"2026-08-07T03:01:00.765348243Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"DEBIAN-CVE-2026-61547","status":"published","published":"2026-07-28T16:52:48.341754987Z","modified":"2026-09-01T15:06:11.971494451Z","updated_at":"2026-11-02T15:45:57.932517Z"},{"id":"MGASA-2026-0397","title":"Updated librabbitmq packages fix security vulnerabilities","description":"amqp_decode_bytes size_t integer overflow bypasses bounds check on\n32-bit (OOB read). (CVE-2026-59986)\nHeap Buffer Overflow in amqp_send_frame() When Serializing Oversized\nAMQP_FRAME_BODY. (CVE-2026-61547)\n","status":"published","published":"2026-09-12T17:24:20Z","modified":"2026-09-12T17:30:02.777328838Z","updated_at":"2026-11-02T15:49:43.795591Z"},{"id":"UBUNTU-CVE-2026-61547","description":"[Unknown description]","status":"published","published":"2026-07-29T00:00:00Z","modified":"2026-09-03T22:55:08.60203182Z","updated_at":"2026-11-02T16:56:43.630667Z"},{"id":"USN-8724-1","title":"librabbitmq vulnerabilities","description":"It was discovered that the rabbitmq-c command-line tools only accepted\ncredentials on the command line, making them visible to other local users\nthrough the process list. An attacker could possibly use this to obtain\nsensitive credentials. This issue only affected Ubuntu 14.04 LTS, Ubuntu\n16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2023-35789)\n\nIt was discovered that rabbitmq-c did not correctly compute AMQP frame\nlengths, leading to a size_t underflow. A remote attacker could possibly\nuse this to cause rabbitmq-c to crash, resulting in a denial of service, or\npossibly expose sensitive information. This issue only affected Ubuntu\n14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS.\n(CVE-2026-44235)\n\nIt was discovered that rabbitmq-c did not properly validate the frame size\nduring the AMQP login handshake. A remote attacker could possibly use this\nto cause a heap buffer overflow, resulting in a denial of service or\npossibly the execution of arbitrary code. This issue only affected Ubuntu\n14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS.\n(CVE-2026-44236)\n\nIt was discovered that rabbitmq-c did not correctly validate the length of\ndecoded bytes fields, leading to an integer overflow in a bounds check on\n32-bit systems. A remote attacker controlling a broker, or able to\nintercept an unencrypted connection, could possibly use this to cause an\nout-of-bounds read, resulting in a denial of service or the exposure of\nsensitive information. (CVE-2026-59986)\n\nIt was discovered that rabbitmq-c did not validate the body fragment length\nwhen serialising an AMQP body frame with the amqp_send_frame() API. An\nattacker could possibly use this to cause a heap buffer overflow, resulting\nin a denial of service (application crash) or possibly the execution of\narbitrary code. This issue did not affect Ubuntu 14.04 LTS.\n(CVE-2026-61547)","status":"published","published":"2026-09-03T15:51:03Z","modified":"2026-09-21T10:00:32.721734371Z","updated_at":"2026-11-02T16:58:26.907654Z"}]}}