rabbitmq-java-client vulnerabilities (Debian)
11 vulnerabilities.
-
rabbitmq-java-clientDebian RabbitMQ Java client: plaintext broker credentials leaked in exception message from ConnectionFactoryConfigurator.load() 5.7 Medium -
rabbitmq-java-clientDebian RabbitMQ: Malformed UTF-8 in shortstr properties permanently disables RPC consumers 6.0 Medium -
rabbitmq-java-clientDebian RabbitMQ: JSONReader in the default JSON-RPC mapper never terminates on truncated input, causing DoS 4.9 Medium -
rabbitmq-java-clientDebian RabbitMQ Java client: Frame-level OOM: Math.min(maxInboundMessageBodySize, 0) defeats frame size enforcement 8.7 High -
rabbitmq-java-clientDebian RabbitMQ Java client accepts broker frames larger than the negotiated AMQP frame_max 0.0 None -
rabbitmq-java-clientDebian RabbitMQ Java client: TrustEverythingTrustManager used by default in useSslProtocol() enables MITM 5.1 Medium -
rabbitmq-java-clientDebian RabbitMQ Java client: Unvalidated Class.forName in JSON-RPC ProcedureDescription enables arbitrary class loading 7.5 High -
rabbitmq-java-clientDebian RabbitMQ Java client ValueReader: Unbounded recursive table/array nesting causes StackOverflowError DoS 8.7 High -
rabbitmq-java-clientDebian RabbitMQ Java client ValueReader: Oversized LongString/bytes length triggers OOM via unchecked allocation 8.7 High -
rabbitmq-java-clientDebian RabbitMQ Java client malformed body frame triggers raw command assembler exception 6.3 Medium -
rabbitmq-java-clientDebian RabbitMQ Java client's lack of message size limitation leads to remote DoS attack 4.9 Medium