Количество 10
Количество 10
BDU:2024-02584
Уязвимость брокера сообщений RabbitMQ, связанная с отсутствием ограничение HTTP API на размер тела HTTP-запроса, позволяющая нарушителю вызвать отказ в обслуживании
ROS-20240402-18
Уязвимость rabbitmq-server
CVE-2023-46118
RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API did not enforce an HTTP request body limit, making it vulnerable for denial of service (DoS) attacks with very large messages. An authenticated user with sufficient credentials can publish a very large messages over the HTTP API and cause target node to be terminated by an "out-of-memory killer"-like mechanism. This vulnerability has been patched in versions 3.11.24 and 3.12.7.
CVE-2023-46118
RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API did not enforce an HTTP request body limit, making it vulnerable for denial of service (DoS) attacks with very large messages. An authenticated user with sufficient credentials can publish a very large messages over the HTTP API and cause target node to be terminated by an "out-of-memory killer"-like mechanism. This vulnerability has been patched in versions 3.11.24 and 3.12.7.
CVE-2023-46118
RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API did not enforce an HTTP request body limit, making it vulnerable for denial of service (DoS) attacks with very large messages. An authenticated user with sufficient credentials can publish a very large messages over the HTTP API and cause target node to be terminated by an "out-of-memory killer"-like mechanism. This vulnerability has been patched in versions 3.11.24 and 3.12.7.
CVE-2023-46118
CVE-2023-46118
RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API ...
SUSE-SU-2023:4939-1
Security update for rabbitmq-server
GHSA-w6cq-9cf4-gqpg
Denial of Service by publishing large messages over the HTTP API
SUSE-FU-2024:2078-1
Feature update for rabbitmq-server313, erlang26, elixir115
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2024-02584 Уязвимость брокера сообщений RabbitMQ, связанная с отсутствием ограничение HTTP API на размер тела HTTP-запроса, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 4.9 | 1% Низкий | почти 3 года назад |
 | ROS-20240402-18 Уязвимость rabbitmq-server | CVSS3: 4.9 | 1% Низкий | больше 2 лет назад |
 | CVE-2023-46118 RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API did not enforce an HTTP request body limit, making it vulnerable for denial of service (DoS) attacks with very large messages. An authenticated user with sufficient credentials can publish a very large messages over the HTTP API and cause target node to be terminated by an "out-of-memory killer"-like mechanism. This vulnerability has been patched in versions 3.11.24 and 3.12.7. | CVSS3: 4.9 | 1% Низкий | почти 3 года назад |
 | CVE-2023-46118 RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API did not enforce an HTTP request body limit, making it vulnerable for denial of service (DoS) attacks with very large messages. An authenticated user with sufficient credentials can publish a very large messages over the HTTP API and cause target node to be terminated by an "out-of-memory killer"-like mechanism. This vulnerability has been patched in versions 3.11.24 and 3.12.7. | CVSS3: 4.9 | 1% Низкий | почти 3 года назад |
 | CVE-2023-46118 RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API did not enforce an HTTP request body limit, making it vulnerable for denial of service (DoS) attacks with very large messages. An authenticated user with sufficient credentials can publish a very large messages over the HTTP API and cause target node to be terminated by an "out-of-memory killer"-like mechanism. This vulnerability has been patched in versions 3.11.24 and 3.12.7. | CVSS3: 4.9 | 1% Низкий | почти 3 года назад |
 | CVSS3: 4.9 | 1% Низкий | около 2 лет назад | |
| CVE-2023-46118 RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API ... | CVSS3: 4.9 | 1% Низкий | почти 3 года назад |
 | SUSE-SU-2023:4939-1 Security update for rabbitmq-server | 1% Низкий | больше 2 лет назад | |
| GHSA-w6cq-9cf4-gqpg Denial of Service by publishing large messages over the HTTP API | CVSS3: 4.9 | 1% Низкий | почти 3 года назад |
| SUSE-FU-2024:2078-1 Feature update for rabbitmq-server313, erlang26, elixir115 | около 2 лет назад |
Уязвимостей на страницу