Поиск уязвимостей
Количество 10
Количество 10
BDU:2024-02584
Уязвимость брокера сообщений RabbitMQ, связанная с отсутствием ограничение HTTP API на размер тела HTTP-запроса, позволяющая нарушителю вызвать отказ в обслуживании
ROS-20240402-18
Уязвимость rabbitmq-server
CVE-2023-46118
RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API did not enforce an HTTP request body limit, making it vulnerable for denial of service (DoS) attacks with very large messages. An authenticated user with sufficient credentials can publish a very large messages over the HTTP API and cause target node to be terminated by an "out-of-memory killer"-like mechanism. This vulnerability has been patched in versions 3.11.24 and 3.12.7.
CVE-2023-46118
RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API did not enforce an HTTP request body limit, making it vulnerable for denial of service (DoS) attacks with very large messages. An authenticated user with sufficient credentials can publish a very large messages over the HTTP API and cause target node to be terminated by an "out-of-memory killer"-like mechanism. This vulnerability has been patched in versions 3.11.24 and 3.12.7.
CVE-2023-46118
RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API did not enforce an HTTP request body limit, making it vulnerable for denial of service (DoS) attacks with very large messages. An authenticated user with sufficient credentials can publish a very large messages over the HTTP API and cause target node to be terminated by an "out-of-memory killer"-like mechanism. This vulnerability has been patched in versions 3.11.24 and 3.12.7.
CVE-2023-46118
CVE-2023-46118
RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API ...
SUSE-SU-2023:4939-1
Security update for rabbitmq-server
GHSA-w6cq-9cf4-gqpg
Denial of Service by publishing large messages over the HTTP API
SUSE-FU-2024:2078-1
Feature update for rabbitmq-server313, erlang26, elixir115
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2024-02584 Уязвимость брокера сообщений RabbitMQ, связанная с отсутствием ограничение HTTP API на размер тела HTTP-запроса, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 4.9 | 1% Низкий | около 3 лет назад |
 | ROS-20240402-18 Уязвимость rabbitmq-server | CVSS3: 4.9 | 1% Низкий | больше 2 лет назад |
 | CVE-2023-46118 RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API did not enforce an HTTP request body limit, making it vulnerable for denial of service (DoS) attacks with very large messages. An authenticated user with sufficient credentials can publish a very large messages over the HTTP API and cause target node to be terminated by an "out-of-memory killer"-like mechanism. This vulnerability has been patched in versions 3.11.24 and 3.12.7. | CVSS3: 4.9 | 1% Низкий | около 3 лет назад |
 | CVE-2023-46118 RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API did not enforce an HTTP request body limit, making it vulnerable for denial of service (DoS) attacks with very large messages. An authenticated user with sufficient credentials can publish a very large messages over the HTTP API and cause target node to be terminated by an "out-of-memory killer"-like mechanism. This vulnerability has been patched in versions 3.11.24 and 3.12.7. | CVSS3: 4.9 | 1% Низкий | около 3 лет назад |
 | CVE-2023-46118 RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API did not enforce an HTTP request body limit, making it vulnerable for denial of service (DoS) attacks with very large messages. An authenticated user with sufficient credentials can publish a very large messages over the HTTP API and cause target node to be terminated by an "out-of-memory killer"-like mechanism. This vulnerability has been patched in versions 3.11.24 and 3.12.7. | CVSS3: 4.9 | 1% Низкий | около 3 лет назад |
 | CVSS3: 4.9 | 1% Низкий | больше 2 лет назад | |
| CVE-2023-46118 RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API ... | CVSS3: 4.9 | 1% Низкий | около 3 лет назад |
 | SUSE-SU-2023:4939-1 Security update for rabbitmq-server | 1% Низкий | почти 3 года назад | |
| GHSA-w6cq-9cf4-gqpg Denial of Service by publishing large messages over the HTTP API | CVSS3: 4.9 | 1% Низкий | около 3 лет назад |
| SUSE-FU-2024:2078-1 Feature update for rabbitmq-server313, erlang26, elixir115 | больше 2 лет назад |
Уязвимостей на страницу