rabbitmq-server vulnerabilities (Azure Linux)
78 vulnerabilities.
rabbitmq-serverAzure LinuxRabbitMQ: Stream protocol skips per vhost per user connection limits6.0 Mediumrabbitmq-serverAzure LinuxRabbitMQ: Authenticated RabbitMQ JMS Topic Selector Users Can Consume Broker CPU with an Unbounded LIKE Regular Expression6.0 Mediumrabbitmq-serverAzure LinuxLink Header Directive Smuggling via Unescaped target/rel/Attribute Keys in cow_link:link/16.3 Mediumrabbitmq-serverAzure LinuxCowboy HTTP/1.1 max_headers Bypass via Duplicate Header Names Enables Memory Exhaustion6.9 Mediumrabbitmq-serverAzure LinuxUnbounded HPACK/QPACK prefixed-integer decoding in Cowlib causes memory-exhaustion DoS8.7 Highrabbitmq-serverAzure LinuxRabbitMQ: Topic authorization can lead to cross-tenant routing-key bypass7.0 Highrabbitmq-serverAzure LinuxRabbitMQ: Passive queue/exchange declaration bypasses authorization checks, leaking queue metadata to unprivileged users5.3 Mediumrabbitmq-serverAzure LinuxRabbitMQ: Direct-reply-to binding persistence can lead to unauthorized reply-channel injection and persistent phantom7.0 Highrabbitmq-serverAzure LinuxRabbitMQ: Unauthenticated disclosure of OAuth client credentials via an HTTP API endpoint with certain less common OAuth 2 configurations8.7 Highrabbitmq-serverAzure LinuxRabbitMQ: AMQP 0-9-1 in combination with OAuth 2: consumer persistence can lead to post-revocation message disclosure4.9 Mediumrabbitmq-serverAzure LinuxRabbitMQ: AMQP 1.0, AMQP 0-9-1, Stream Protocol loopback enforcement can lead to remote guest sessions due to listener-address loopback checks6.8 Mediumrabbitmq-serverAzure LinuxRabbitMQ: Stream listener does not enforce configured frame-size limit during authentication, permitting unauth'd mem-exhaust DoS7.5 Highrabbitmq-serverAzure LinuxRabbitMQ: Stored XSS in RabbitMQ management UI7.1 Highrabbitmq-serverAzure LinuxRabbitMQ: UNC SSRF affecting the management UI on Windows6.5 Mediumrabbitmq-serverAzure LinuxRabbitMQ management HTTP API accepts request bodies larger than configured max_http_body_size7.1 Highrabbitmq-serverAzure LinuxRabbitMQ: Stored XSS federation management plugin via unsanitized consumer_tag rendering5.7 Mediumrabbitmq-serverAzure LinuxHTTP Response Splitting via Non-VCHAR Bytes in cow_http_struct_hd:escape_string/26.3 Mediumrabbitmq-serverAzure Linuxgun HTTP/1.1 response buffer has no size limit allowing server-controlled memory exhaustion8.7 Highrabbitmq-serverAzure LinuxRabbitMQ: Unsanitized vhost names allow for XSS in management UI5.6 Mediumrabbitmq-serverAzure LinuxUnbounded buffer accumulation in multipart header parsing causes denial of service in cowboy8.2 Highrabbitmq-serverAzure LinuxCR Injection in SSE Encoder Enables Event Splitting via cow_sse:event/16.3 Mediumrabbitmq-serverAzure LinuxUnbounded chunk-size hex digits in cowlib cause quadratic CPU and memory DoS8.7 Highrabbitmq-serverAzure LinuxCookie Request Header Injection via Unvalidated Encoder in cow_cookie:cookie/12.1 Lowrabbitmq-serverAzure LinuxRabbitMQ Node can log Basic Auth header from an HTTP request6.7 Mediumrabbitmq-serverAzure LinuxRabbitMQ has XSS Vulnerability in an Error Message in Management UI6.1 Mediumrabbitmq-serverAzure Linuxerlang-jose vulnerable to denial of service via large p2c value5.3 Mediumrabbitmq-serverAzure LinuxDenial of Service by publishing large messages over the HTTP API4.9 Medium