RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API did not enforce an HTTP request body limit, making it vulnerable for denial of service (DoS) attacks with very large messages. An authenticated user with sufficient credentials can publish a very large messages over the HTTP API and cause target node to be terminated by an "out-of-memory killer"-like mechanism. This vulnerability has been patched in versions 3.11.24 and 3.12.7.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-SUSE-FU-2024:2078-1 advisory.

    rabbitmq-server was implemented with a parallel versioned RPM package at version 3.13.1 (jsc#PED-8414):

    - Security issues fixed:

      * CVE-2021-22116: Fixed improper input validation that may lead to Denial of Sercice (DoS) attacks     (bsc#1186203)
      * CVE-2021-32718, CVE-2021-32719: Fixed potential for JavaScript code execution in the management UI         (bsc#1187818, bsc#1187819)
      * CVE-2022-31008: Fixed encryption key used to encrypt the URI was seeded with a predictable secret     (bsc#1205267)
      * CVE-2023-46118: Fixed HTTP API vulnerability for denial of service (DoS) attacks with very large     messages         (bsc#1216582)

    - Other bugs fixed:

      * Fixed RabbitMQ maintenance status issue (bsc#1199431)
      * Provide user/group for RPM 4.19 (bsc#1219532)
      * Fixed `rabbitmqctl` command for `add_user` (bsc#1222591)
      * Added hardening to systemd service(s) (bsc#1181400)
      * Use /run instead of deprecated /var/run in tmpfiles.conf (bsc#1185075)

    - For the full list of upstream changes of this update between version 3.8.11 and 3.13.1 please consult:

      * https://www.rabbitmq.com/release-information

    erlang26:

    - Provide RPM package as it's a dependency of rabbitmq-server313 (jsc#PED-8414)

    elixir115:

    - Provide RPM package as needed in some cases by rabbitmq-server313 (jsc#PED-8414)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:0217 advisory.

    RabbitMQ is an implementation of AMQP, the emerging standard for high performance enterprise messaging.
    The RabbitMQ server is a robust and scalable implementation of an AMQP broker.

    Security Fix(es):

    * rabbitmq-server: DoS by publishing large messages over the HTTP API (CVE-2023-46118)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4939-1 advisory.

  - RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API did not enforce an HTTP request body     limit, making it vulnerable for denial of service (DoS) attacks with very large messages. An authenticated     user with sufficient credentials can publish a very large messages over the HTTP API and cause target node     to be terminated by an out-of-memory killer-like mechanism. This vulnerability has been patched in     versions 3.11.24 and 3.12.7. (CVE-2023-46118)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3687 advisory.

  - RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API did not enforce an HTTP request body     limit, making it vulnerable for denial of service (DoS) attacks with very large messages. An authenticated     user with sufficient credentials can publish a very large messages over the HTTP API and cause target node     to be terminated by an out-of-memory killer-like mechanism. This vulnerability has been patched in     versions 3.11.24 and 3.12.7. (CVE-2023-46118)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 11 / 12 host has a package installed that is affected by a vulnerability as referenced in the dsa-5571 advisory.

  - RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API did not enforce an HTTP request body     limit, making it vulnerable for denial of service (DoS) attacks with very large messages. An authenticated     user with sufficient credentials can publish a very large messages over the HTTP API and cause target node     to be terminated by an out-of-memory killer-like mechanism. This vulnerability has been patched in     versions 3.11.24 and 3.12.7. (CVE-2023-46118)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.04 / 23.10 host has a package installed that is affected by a vulnerability as referenced in the USN-6501-1 advisory.

    It was discovered that RabbitMQ incorrectly handled certain HTTP requests. An attacker could possibly use     this issue to cause a denial of service.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to its self-reported version, the Tenable Identity Exposure running on the remote host is prior to 3.42.17. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2023-33 advisory.
Tenable Identity Exposure leverages third-party software to help provide underlying functionality. Several of the third-party components (RabbitMQ, libcurl, and nodeJS) were found to contain vulnerabilities, and updated versions have been made available by the providers. Out of caution and in line with best practice, Tenable has opted to upgrade these components to address the potential impact of the issues. Tenable Identity Exposure 3.42.17 updates RabbitMQ to version 3.12.6, libcurl to version 8.4.0 and nodeJS to version 18.18.0 to address the identified vulnerabilities. 

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
200752	SUSE SLES15 / openSUSE 15 : Feature update for rabbitmq-server313, erlang26, elixir115 (SUSE-SU-SUSE-FU-2024:2078-1)	Nessus	SuSE Local Security Checks	high
189081	RHEL 9 : Red Hat OpenStack Platform 17.1 (rabbitmq-server) (RHSA-2024:0217)	Nessus	Red Hat Local Security Checks	medium
187148	SUSE SLES15 / openSUSE 15 Security Update : rabbitmq-server (SUSE-SU-2023:4939-1)	Nessus	SuSE Local Security Checks	medium
186866	Debian DLA-3687-1 : rabbitmq-server - LTS security update	Nessus	Debian Local Security Checks	medium
186517	Debian DSA-5571-1 : rabbitmq-server - security update	Nessus	Debian Local Security Checks	medium
186079	Ubuntu 20.04 LTS / 22.04 LTS / 23.04 / 23.10 : RabbitMQ vulnerability (USN-6501-1)	Nessus	Ubuntu Local Security Checks	medium
183963	Tenable Identity Exposure < 3.42.17 Multiple Vulnerabilities (TNS-2023-33)	Nessus	Misc.	critical

Detections

Analytics

CVE-2023-46118

medium

Tenable Plugins

high

medium

medium

medium

medium

medium

critical