CVE-2021-22116

RabbitMQ all versions prior to 3.8.16 are prone to a denial of service vulnerability due to improper input validation in AMQP 1.0 client connection en...

Original description

The description as published by the source.

RabbitMQ all versions prior to 3.8.16 are prone to a denial of service vulnerability due to improper input validation in AMQP 1.0 client connection endpoint. A malicious user can exploit the vulnerability by sending malicious AMQP messages to the target RabbitMQ instance having the AMQP 1.0 plugin enabled.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Affected packages

Bitnami rabbitmq

[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.8.16"}]}]

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2021-22116 rabbitmq-server Fixed in: 3.9.4-1

References

advisory lists.debian.org
advisory tanzu.vmware.com
web nvd.nist.gov