Rabbitmq Java Client
Approved changes feed: RSS · Atom
cpe:2.3:a:vmware:rabbitmq_java_client:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Vmware (7bb62c7c-2241-5a0b-8dbc-5f13251fb24e) |
|---|---|
| Product | Rabbitmq Java Client (8f5852b6-569b-5c3d-8488-a8edd6e0e8d3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-46120 |
vulnerable | 2026-06-08 06:12:43.882911 |
RabbitMQ Java client's lack of message size limitation leads to remote DoS attack
MEDIUM (4.9)
The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. `maxBodyLebgth` was not used when receiving Message objects. Attackers could send a very large Message causing a memory overflow and triggering an OOM Error. Users of RabbitMQ may suffer from DoS attacks from RabbitMQ Java client which will ultimately exhaust the memory of the consumer. This vulnerability was patched in version 5.18.0.
Published: 2023-10-24T23:05:24.172Z
Updated: 2024-09-11T13:20:34.629Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-11087 |
vulnerable | 2026-06-08 05:10:37.873281 |
TLS validation error
Pivotal Spring AMQP, 1.x versions prior to 1.7.10 and 2.x versions prior to 2.0.6, expose a man-in-the-middle vulnerability due to lack of hostname validation. A malicious user that has the ability to intercept traffic would be able to view data in transit.
Published: 2018-09-14T20:00:00.000Z
Updated: 2024-09-17T03:58:41.663Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.