VMware

Rabbitmq Java Client

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2023-46120

Exploit
  • EPSS 0.42%
  • Published 25.10.2023 18:17:36
  • Last modified 21.11.2024 08:27:55

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. `maxBodyLebgth` was not used when receiving Message objects. Attackers could send a very large Message causing a memory overflow ...

5.9

CVE-2018-11087

  • EPSS 0.52%
  • Published 14.09.2018 20:29:00
  • Last modified 27.03.2025 19:56:20

Pivotal Spring AMQP, 1.x versions prior to 1.7.10 and 2.x versions prior to 2.0.6, expose a man-in-the-middle vulnerability due to lack of hostname validation. A malicious user that has the ability to intercept traffic would be able to view data in t...