CVE-2015-8786
Fixed in a distro release EPSS 4%
The Management plugin in RabbitMQ before 3.6.1 allows remote authenticated users with certain privileges to cause a denial of service (resource consumption) via the (1) lengths_age or (2) lengths_incr parameter.
Products: oracle solaris, pivotal_software rabbitmq
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | rabbitmq-server | 3.6.5-1 |
| Debian 13 | rabbitmq-server | 3.6.5-1 |
| Debian 14 | rabbitmq-server | 3.6.5-1 |
| Red Hat openstack 5 | rabbitmq-server | 0:3.3.5-31.el7ost |
| Red Hat openstack 5 | rabbitmq-server | 0:3.1.5-7.el6ost |
| Red Hat openstack 6 | rabbitmq-server | 0:3.3.5-31.el7ost |
| Red Hat openstack 7 | rabbitmq-server | 0:3.3.5-31.el7ost |
| Red Hat openstack 8 | rabbitmq-server | 0:3.3.5-30.el7ost |
| Ubuntu Pro 16.04 LTS | rabbitmq-server | no fix |