vulnerability

FreeBSD: VID-7003b62d-7252-46ff-a9df-1b1900f1e65b (CVE-2021-22116): RabbitMQ -- Denial of Service via improper input validation

Severity
4
CVSS
(AV:N/AC:M/Au:N/C:N/I:N/A:P)
Published
Jun 28, 2021
Added
Nov 4, 2022
Modified
Dec 10, 2025

Description

Jonathon Knudsen of Synopsys Cybersecurity Research Center reports: All versions prior to 3.8.16 are prone to a denial of service vulnerability due to improper input validation in AMQP 1.0 client connection endpoint. A malicious client can exploit the vulnerability by sending malicious AMQP messages to the target RabbitMQ instance having the AMQP 1.0 plugin enabled.

Solution

freebsd-upgrade-package-rabbitmq
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.