CVE-2021-22116

Description

RabbitMQ all versions prior to 3.8.16 are prone to a denial of service vulnerability due to improper input validation in AMQP 1.0 client connection endpoint. A malicious user can exploit the vulnerability by sending malicious AMQP messages to the target RabbitMQ instance having the AMQP 1.0 plugin enabled.

Risk Information

Base Score

7.5

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS Score

Exploitation Probability

1.026

Associated Vulnerability

Vulnerability	OS Platform
Vulnerability CVE-2021-22116,CVE-2021-22117 are affected in RabbitMQ 3.8.15	Windows
AMQP server written in Erlang (USN-5004-1) rabbitmq-server_3.8.2-0ubuntu1.3_all.deb	Linux
AMQP server written in Erlang (USN-5004-1) rabbitmq-server_3.8.5-1ubuntu0.2_all.deb	Linux
AMQP server written in Erlang (USN-5004-1) rabbitmq-server_3.8.9-2ubuntu0.1_all.deb	Linux
AMQP server written in Erlang (USN-5004-1) rabbitmq-server_3.6.10-1ubuntu0.5_all.deb	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234