CVE-2021-22116

7.5HIGH

Key Information:

Vendor
Vmware
Status
RabbitMQ
Vendor
CVE Published:
8 June 2021

Summary

RabbitMQ all versions prior to 3.8.16 are prone to a denial of service vulnerability due to improper input validation in AMQP 1.0 client connection endpoint. A malicious user can exploit the vulnerability by sending malicious AMQP messages to the target RabbitMQ instance having the AMQP 1.0 plugin enabled.

Affected Version(s)

RabbitMQ RabbitMQ prior to version 3.8.16

References

https://tanzu.vmware.com/security/cve-2021-22116
x_refsource_MISC
https://lists.debian.org/debian-lts-announce/2021/07/msg0...
mailing-listx_refsource_MLIST

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.