https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-01T02:54:47.094014+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2023-35789 CVE-2023-35789 2026-10-01T02:54:47.124043+00:00

An issue was discovered in the C AMQP client library (aka rabbitmq-c) through 0.13.0 for RabbitMQ. Credentials can only be entered on the command line (e.g., for amqp-publish or amqp-consume) and are thus visible to local attackers by listing a process and its arguments.

 https://vulnerability.circl.lu/vuln/usn-8437-1 USN-8437-1 — librabbitmq vulnerabilities 2026-10-01T02:54:47.124243+00:00

Affected: Ubuntu:22.04:LTS: librabbitmq, Ubuntu:24.04:LTS: librabbitmq, Ubuntu:25.10: librabbitmq, Ubuntu:26.04:LTS: librabbitmq

It was discovered that rabbitmq-c exposed credentials in command-line arguments under certain circumstances. A local attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2023-35789)

It was discovered that rabbitmq-c incorrectly handled AMQP frame lengths under certain circumstances, which could lead to an out-of-bounds read. A remote attacker could possibly use this issue to cause rabbitmq-c to crash, resulting in a denial of service. (CVE-2026-44235)

It was discovered that rabbitmq-c incorrectly handled AMQP login handshakes under certain circumstances, which could lead to a heap buffer overflow. A remote attacker could possibly use this issue to cause rabbitmq-c to crash, resulting in a denial of service, or execute arbitrary code. (CVE-2026-44236)