Veracode Vulnerability DatabaseVERACODE:43972Denial Of Service (DoS)
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.2 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
59.0%
amqp-client is vulnerable to Denial Of Service (DoS). The vulnerability exists because the library does not incorporate the maximum inbound message size into the ConnectionFactory. As a result, an attacker can potentially cause an application crash by sending excessively large messages, leading to a memory overflow and triggering an Out-Of-Memory (OOM) error.
| CPE | Name | Operator | Version |
|---|---|---|---|
| rabbitmq java client | le | 5.17.1 | |
| rabbitmq java client | le | 5.17.1 |
References
github.com/advisories/GHSA-mm8h-8587-p46h
github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8
github.com/rabbitmq/rabbitmq-java-client/issues/1062
github.com/rabbitmq/rabbitmq-java-client/releases/tag/v5.18.0
github.com/rabbitmq/rabbitmq-java-client/security/advisories/GHSA-mm8h-8587-p46h
Related
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.2 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
59.0%