rabbitmq-server4.2 vulnerabilities (Red Hat)
14 vulnerabilities.
-
rabbitmq-server4.2Red Hat Cowboy HTTP/1.1 max_headers Bypass via Duplicate Header Names Enables Memory Exhaustion 6.9 Medium -
rabbitmq-server4.2Red Hat Unbounded HPACK/QPACK prefixed-integer decoding in Cowlib causes memory-exhaustion DoS 8.7 High -
rabbitmq-server4.2Red Hat RabbitMQ: Topic authorization can lead to cross-tenant routing-key bypass 7.0 High -
rabbitmq-server4.2Red Hat RabbitMQ: Passive queue/exchange declaration bypasses authorization checks, leaking queue metadata to unprivileged users 5.3 Medium -
rabbitmq-server4.2Red Hat RabbitMQ: Direct-reply-to binding persistence can lead to unauthorized reply-channel injection and persistent phantom 7.0 High -
rabbitmq-server4.2Red Hat RabbitMQ: Unauthenticated disclosure of OAuth client credentials via an HTTP API endpoint with certain less common OAuth 2 configurations 8.7 High -
rabbitmq-server4.2Red Hat RabbitMQ: AMQP 0-9-1 in combination with OAuth 2: consumer persistence can lead to post-revocation message disclosure 4.9 Medium -
rabbitmq-server4.2Red Hat RabbitMQ: AMQP 1.0, AMQP 0-9-1, Stream Protocol loopback enforcement can lead to remote guest sessions due to listener-address loopback checks 6.8 Medium -
rabbitmq-server4.2Red Hat RabbitMQ: Stream listener does not enforce configured frame-size limit during authentication, permitting unauth'd mem-exhaust DoS 7.5 High -
rabbitmq-server4.2Red Hat RabbitMQ: Stored XSS in RabbitMQ management UI 7.1 High -
rabbitmq-server4.2Red Hat RabbitMQ: UNC SSRF affecting the management UI on Windows 6.5 Medium -
rabbitmq-server4.2Red Hat RabbitMQ management HTTP API accepts request bodies larger than configured max_http_body_size 7.1 High -
rabbitmq-server4.2Red Hat RabbitMQ: Stored XSS federation management plugin via unsanitized consumer_tag rendering 5.7 Medium -
rabbitmq-server4.2Red Hat RabbitMQ MQTT Topic Permission Authorization Bypass 5.3 Medium