Approved changes feed: RSS · Atom

cpe:2.3:a:rabbitmq-c_project:rabbitmq-c:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRabbitmq C Project (51701bc8-be04-5a1e-ae7e-2bb75e01ad8d)
ProductRabbitmq C (82848e6c-7163-5ff7-8664-3c3972034f4f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:bitbucket/dewn49/rabbitmq-c purl2cpe 2026-06-01 10:16:21.879015
pkg:github/alanxz/rabbitmq-c purl2cpe 2026-06-01 10:16:21.879018
pkg:rpm/opensuse/rabbitmq-c purl2cpe 2026-06-01 10:16:21.879021

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-35789 vulnerable 2026-06-08 06:06:27.761961 Details available
An issue was discovered in the C AMQP client library (aka rabbitmq-c) through 0.13.0 for RabbitMQ. Credentials can only be entered on the command line (e.g., for amqp-publish or amqp-consume) and are thus visible to local attackers by listing a process and its arguments.
Published: 2023-06-16T00:00:00.000Z
Updated: 2025-03-30T01:30:27.754Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-18609 vulnerable 2026-06-08 05:13:11.685828 Details available
An issue was discovered in amqp_handle_input in amqp_connection.c in rabbitmq-c 0.9.0. There is an integer overflow that leads to heap memory corruption in the handling of CONNECTION_STATE_HEADER. A rogue server could return a malicious frame header that leads to a smaller target_size value than needed. This condition is then carried on to a memcpy function that copies too much data into a heap buffer.
Published: 2019-12-01T21:50:08.000Z
Updated: 2024-08-05T01:54:14.437Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.