Search CVE reports


Toggle filters

11 – 20 of 24 results


CVE-2020-5419

Medium priority
Not affected

RabbitMQ versions 3.8.x prior to 3.8.7 are prone to a Windows-specific binary planting security vulnerability that allows for arbitrary code execution. An attacker with write privileges to the RabbitMQ installation directory and...

1 affected package

rabbitmq-server

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
rabbitmq-server Not affected Not affected
Show less packages

CVE-2019-11287

Low priority

Some fixes available 2 of 4

Pivotal RabbitMQ, versions 3.7.x prior to 3.7.21 and 3.8.x prior to 3.8.1, and RabbitMQ for Pivotal Platform, 1.16.x versions prior to 1.16.7 and 1.17.x versions prior to 1.17.4, contain a web management plugin that is vulnerable...

1 affected package

rabbitmq-server

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
rabbitmq-server Not affected Not affected Fixed
Show less packages

CVE-2019-11291

Low priority
Not affected

Pivotal RabbitMQ, 3.7 versions prior to v3.7.20 and 3.8 version prior to v3.8.1, and RabbitMQ for PCF, 1.16.x versions prior to 1.16.7 and 1.17.x versions prior to 1.17.4, contain two endpoints, federation and shovel, which do not...

1 affected package

rabbitmq-server

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
rabbitmq-server Not affected Not affected
Show less packages

CVE-2019-11281

Low priority
Ignored

Pivotal RabbitMQ, versions prior to v3.7.18, and RabbitMQ for PCF, versions 1.15.x prior to 1.15.13, versions 1.16.x prior to 1.16.6, and versions 1.17.x prior to 1.17.3, contain two components, the virtual host limits page, and...

1 affected package

rabbitmq-server

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
rabbitmq-server Not affected Not affected Not affected
Show less packages

CVE-2018-1279

Low priority
Needs evaluation

Pivotal RabbitMQ for PCF, all versions, uses a deterministically generated cookie that is shared between all machines when configured in a multi-tenant cluster. A remote attacker who can gain information about the network topology...

1 affected package

rabbitmq-server

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
rabbitmq-server Not affected Not affected Not affected Needs evaluation Needs evaluation
Show less packages

CVE-2017-4967

Negligible priority
Vulnerable

An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions prior to 1.6.18, and...

1 affected package

rabbitmq-server

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
rabbitmq-server Not affected Not affected Not affected Not affected Not affected
Show less packages

CVE-2017-4966

Low priority

Some fixes available 1 of 3

An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions prior to 1.6.18, and...

1 affected package

rabbitmq-server

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
rabbitmq-server Not affected Not affected Not affected
Show less packages

CVE-2017-4965

Negligible priority
Vulnerable

An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions prior to 1.6.18, and...

1 affected package

rabbitmq-server

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
rabbitmq-server Not affected Not affected Not affected Not affected Not affected
Show less packages

CVE-2016-9877

High priority

Some fixes available 2 of 4

An issue was discovered in Pivotal RabbitMQ 3.x before 3.5.8 and 3.6.x before 3.6.6 and RabbitMQ for PCF 1.5.x before 1.5.20, 1.6.x before 1.6.12, and 1.7.x before 1.7.7. MQTT (MQ Telemetry Transport) connection authentication...

1 affected package

rabbitmq-server

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
rabbitmq-server
Show less packages

CVE-2015-8786

Negligible priority
Vulnerable

The Management plugin in RabbitMQ before 3.6.1 allows remote authenticated users with certain privileges to cause a denial of service (resource consumption) via the (1) lengths_age or (2) lengths_incr parameter.

1 affected package

rabbitmq-server

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
rabbitmq-server Not affected Not affected Not affected Not affected Not affected
Show less packages