QwikSec

Security Database

CVE

CWE

Training

CVE-2021-22116

Published: Jun 8, 2021

Modified: Aug 3, 2024

PUBLISHED

Description

RabbitMQ all versions prior to 3.8.16 are prone to a denial of service vulnerability due to improper input validation in AMQP 1.0 client connection endpoint. A malicious user can exploit the vulnerability by sending malicious AMQP messages to the target RabbitMQ instance having the AMQP 1.0 plugin enabled.

Vendor	Product	Versions
n/a	RabbitMQ	affected `RabbitMQ prior to version 3.8.16`

Weaknesses (CWE)

References

https://tanzu.vmware.com/security/cve-2021-22116

x_refsource_MISC

[debian-lts-announce] 20210719 [SECURITY] [DLA 2710-1] rabbitmq-server security update

mailing-list

x_refsource_MLIST

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.