Red Hat Security Advisory

RHSA-2020:0078

rabbitmq-server security update

Released 2020-01-13 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenStack Platform 15.0 rabbitmq-server-3.7.22-1.el8ost

Fixes 2 records

TI-2019-08444 CVE-2019-11287 · GHSA-hrfh-7j5f-8ccr

RabbitMQ Web Management Plugin DoS via heap overflow

MEDIUM 40

Pivotal RabbitMQ, versions 3.7.x prior to 3.7.21 and 3.8.x prior to 3.8.1, and RabbitMQ for Pivotal Platform, 1.16.x versions prior to 1.16.7 and 1.17.x versions prior to 1.17.4, contain a web management plugin that is v…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04397 Published 2019-11-22 Partial fix · 1.16.7, 1.17.4 +4 CWE-400

TI-2019-08439 CVE-2019-11281 · GHSA-8v5q-8hwh-h2x8

RabbitMQ XSS attack

LOW 24

Pivotal RabbitMQ, versions prior to v3.7.18, and RabbitMQ for PCF, versions 1.15.x prior to 1.15.13, versions 1.16.x prior to 1.16.6, and versions 1.17.x prior to 1.17.3, contain two components, the virtual host limits p…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.01165 Published 2019-10-16 Partial fix · v3.7.18, 1.15.13 +2 CWE-79