CVE-2023-35789
An issue was discovered in the C AMQP client library (aka rabbitmq-c) through 0.13.0 for RabbitMQ. Credentials can only be entered on the command line...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An issue was discovered in the C AMQP client library (aka rabbitmq-c) through 0.13.0 for RabbitMQ. Credentials can only be entered on the command line (e.g., for amqp-publish or amqp-consume) and are thus visible to local attackers by listing a process and its arguments.
Paquets affectés
Bitnami
rabbitmq-c
[{"type":"SEMVER","events":[{"introduced":"0"},{"last_affected":"0.13.0"}]}]
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Alpine Linux ALPINE-CVE-2023-35789 rabbitmq-c Corrigé dans: 0.14.0-r0
- Debian DEBIAN-CVE-2023-35789 librabbitmq Corrigé dans: 0.10.0-1+deb11u1
- Ubuntu UBUNTU-CVE-2023-35789 librabbitmq Corrigé dans: 0.4.1-1ubuntu0.1~esm2
Références
- advisory nvd.nist.gov
- advisory github.com
- patch github.com
- report github.com
- web lists.debian.org