AZL-92337
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-92337.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-92337
- Upstream
- Published
- 2026-07-10T21:16:59Z
- Modified
- 2026-08-29T05:27:27Z
- Summary
- CVE-2026-57220 affecting package rabbitmq-server for versions less than 3.13.7-8
- Details
-
RabbitMQ is a messaging and streaming broker. Prior to 4.2.6, the RabbitMQ stream listener does not enforce the configured stream frame-size limit while assembling frames during authentication and before Tune negotiation, allowing an unauthenticated remote client to declare oversized frame lengths and consume broker memory in rabbitstreamcore. This issue is fixed in version 4.2.6.
- References