Most recent entries from all

fkie_cve-2026-61547

2026-11-15T22:41:32.497591+00:00

rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to version 0.17.0, a heap buffer overflow exists in rabbitmq-c when the public amqp_send_frame() API is used to serialize an oversized AMQP_FRAME_BODY. The issue occurs because amqp_frame_to_bytes() copies frame.payload.body_fragment.len bytes into the connection outbound buffer without validating that the body fragment fits within the allocated frame buffer. An application that passes an oversized body frame to amqp_send_frame() can trigger a heap out-of-bounds write, resulting in process crash and memory corruption. This issue has been patched in version 0.17.0.

OESA-2026-3308 — librabbitmq security update

2026-11-15T22:41:32.497686+00:00

Affected: openEuler:20.03-LTS-SP4: librabbitmq, openEuler:22.03-LTS-SP4: librabbitmq, openEuler:24.03-LTS-SP1: librabbitmq, openEuler:24.03-LTS-SP3: librabbitmq, openEuler:24.03-LTS-SP4: librabbitmq

This is a C-language AMQP client library for use with AMQP servers speaking protocol versions 0-9-1. Security Fix(es):

CVE-2026-59986 is a security vulnerability affecting the librabbitmq library. Specific details of the vulnerability have not been disclosed. librabbitmq is the C client library for RabbitMQ messaging middleware.(CVE-2026-59986)

CVE-2026-61547 is a security vulnerability in librabbitmq (RabbitMQ C client library). Details of the vulnerability have not been disclosed yet, and all versions are affected.(CVE-2026-61547)

UBUNTU-CVE-2026-61547

2026-11-15T22:41:32.497757+00:00

Affected: Ubuntu:Pro:16.04:LTS: librabbitmq, Ubuntu:Pro:18.04:LTS: librabbitmq, Ubuntu:Pro:20.04:LTS: librabbitmq, Ubuntu:22.04:LTS: librabbitmq, Ubuntu:24.04:LTS: librabbitmq, Ubuntu:26.04:LTS: librabbitmq

[Unknown description]