CVE-2021-22116

RabbitMQ all versions prior to 3.8.16 are prone to a denial of service vulnerability due to improper input validation in AMQP 1.0 client connection en...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

RabbitMQ all versions prior to 3.8.16 are prone to a denial of service vulnerability due to improper input validation in AMQP 1.0 client connection endpoint. A malicious user can exploit the vulnerability by sending malicious AMQP messages to the target RabbitMQ instance having the AMQP 1.0 plugin enabled.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Paquets affectés

Bitnami rabbitmq

[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.8.16"}]}]

État des correctifs par distribution

Paquets corrigés publiés par chaque distribution pour cette CVE

Debian DEBIAN-CVE-2021-22116 rabbitmq-server Corrigé dans: 3.9.4-1

Références

advisory lists.debian.org
advisory tanzu.vmware.com
web nvd.nist.gov