The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6343 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6343-1                   security@debian.org     https://www.debian.org/security/                       Moritz Muehlenhoff     June 12, 2026                         https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : librabbitmq     CVE ID         : CVE-2026-44235 CVE-2026-44236

    Two security vulnberabilities were discovered in librabbitmq, an AMQP     client library, which could result in denial of service or potentially     the execution of arbitrary code.

    For the stable distribution (trixie), these problems have been fixed in     version 0.15.0-1+deb13u1.

    We recommend that you upgrade your librabbitmq packages.

    For the detailed security status of librabbitmq please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/librabbitmq

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4658 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-4658-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                           Chris Lamb     June 30, 2026                                 https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : librabbitmq     Version        : 0.10.0-1+deb11u2 0.11.0-1+deb12u2     CVE ID         : CVE-2026-44235 CVE-2026-44236

    Two issues were discovered in librabbitmq, a C-language client     library used to communicate with RabbitMQ servers using the Advanced     Message Queuing Protocol (AMQP).

    CVE-2026-44235

        A size_t underflow in AMQP frame length computation could have         led to an out-of-bounds read.

    CVE-2026-44236

        A heap buffer overflow in AMQP login handshake via undersized         connection.tune.frame_max.

    For Debian 11 bullseye, these problems have been fixed in version     0.10.0-1+deb11u2.

    For Debian 12 bookworm, these problems have been fixed in version     0.11.0-1+deb12u2.

    We recommend that you upgrade your librabbitmq packages.

    For the detailed security status of librabbitmq please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/librabbitmq

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-75582 advisory.

    - CVE-2026-44236 librabbitmq: rabbitmq-c: Heap buffer overflow leading to denial of service [rhel-8.10.z]       leading to denial of service [rhel-8.10.z]

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1981:01 advisory.

    * rabbitmq-c: rabbitmq-c: Heap buffer overflow leading to denial of service (CVE-2026-44236)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792765036 advisory.

  - rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to 0.16.0, a malicious AMQP server can     send an undersized connection.tune.frame_max value during amqp_login(), and rabbitmq-c accepts the value     in amqp_login_inner() in librabbitmq/amqp_socket.c. amqp_tune_connection() in     librabbitmq/amqp_connection.c uses frame_max to reallocate the outbound buffer without enforcing     AMQP_FRAME_MIN_SIZE. Immediate serialization of connection.tune-ok through amqp_frame_to_bytes() writes     beyond the undersized heap allocation, causing memory corruption and likely denial of service. An on-path     attacker can also trigger the flaw against plaintext AMQP traffic. Code execution is theoretically     possible but was not demonstrated. This issue is fixed in version 0.16.0. (CVE-2026-44236)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-2026_98467 advisory.

    * rabbitmq-c: rabbitmq-c: Heap buffer overflow leading to denial of service (CVE-2026-44236)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
320890	Debian dsa-6343 : amqp-tools - security update	Nessus	Debian Local Security Checks	2026/6/12	2026/9/18	high
323988	Debian dla-4658 : amqp-tools - security update	Nessus	Debian Local Security Checks	2026/6/30	2026/9/18	high
363465	Oracle Linux 8 : librabbitmq (ELSA-2026-75582)	Nessus	Oracle Linux Local Security Checks	2026/10/6	2026/10/6	high
363760	MiracleLinux 8 : librabbitmq-0.9.0-6.el8_10 (AXSA:2026-1981:01)	Nessus	Miracle Linux Local Security Checks	2026/10/7	2026/10/7	high
371431	Rocky Linux 9.6 [TuxCare] Security Update: librabbitmq / librabbitmq-devel / librabbitmq-tools (ALMALINUX9.6:CLSA-2026:1792765036)	Nessus	Rocky Linux Local Security Checks	2026/10/23	2026/10/23	high
379448	Rocky Linux 9 [CIQ] Security Update: librabbitmq / librabbitmq-debuginfo / librabbitmq-debugsource / etc (crlsa-2026_98467)	Nessus	Rocky Linux Local Security Checks	2026/11/12	2026/11/12	high

偵測

搜尋 Plugin

high

high

high

high

high

high