CVE-2023-46120
- Source
- https://cve.org/CVERecord?id=CVE-2023-46120
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-46120.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2023-46120
- Aliases
- Downstream
- Related
- Published
- 2023-10-24T23:05:24.172Z
- Modified
- 2026-07-22T02:50:02.634844Z
- Severity
-
- 4.9 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- RabbitMQ Java client's lack of message size limitation leads to remote DoS attack
- Details
-
The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes.
maxBodyLebgthwas not used when receiving Message objects. Attackers could send a very large Message causing a memory overflow and triggering an OOM Error. Users of RabbitMQ may suffer from DoS attacks from RabbitMQ Java client which will ultimately exhaust the memory of the consumer. This vulnerability was patched in version 5.18.0. - Database specific
{ "cwe_ids": [ "CWE-400" ], "cna_assigner": "GitHub_M", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/46xxx/CVE-2023-46120.json" }- References
-
- https://github.com/rabbitmq/rabbitmq-java-client/releases/tag/v5.18.0
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/46xxx/CVE-2023-46120.json
- https://github.com/rabbitmq/rabbitmq-java-client/security/advisories/GHSA-mm8h-8587-p46h
- https://nvd.nist.gov/vuln/detail/CVE-2023-46120
- https://github.com/rabbitmq/rabbitmq-java-client/issues/1062
- https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8
Affected packages
Git / github.com/rabbitmq/rabbitmq-java-client
Affected ranges
- Type
- GIT
- Repo
- https://github.com/rabbitmq/rabbitmq-java-client
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixedFixed
- Database specific
{ "cpe": "cpe:2.3:a:vmware:rabbitmq_java_client:*:*:*:*:*:*:*:*", "extracted_events": [ { "introduced": "0" }, { "fixed": "5.18.0" } ], "source": [ "CPE_RANGE", "REFERENCES" ] }
Affected versions
Other
rabbitmq_v1_4_0
rabbitmq_v1_6_0
rabbitmq_v1_7_0
rabbitmq_v1_7_1
rabbitmq_v1_7_2
rabbitmq_v1_8_0
rabbitmq_v1_8_1
rabbitmq_v2_4_0
rabbitmq_v2_7_0
rabbitmq_v3_4_1
rabbitmq_v3_4_2
rabbitmq_v3_4_3
rabbitmq_v3_4_4
rabbitmq_v3_5_0
rabbitmq_v3_6_0
rabbitmq_v3_6_0_milestone1
rabbitmq_v3_6_0_milestone2
rabbitmq_v3_6_0_milestone3
rabbitmq_v3_6_0_rc1
rabbitmq_v3_6_0_rc2
rabbitmq_v3_6_0_rc3
rabbitmq_v3_7_0_milestone1
rabbitmq_v3_7_0_milestone10
rabbitmq_v3_7_0_milestone11
rabbitmq_v3_7_0_milestone12
rabbitmq_v3_7_0_milestone13
rabbitmq_v3_7_0_milestone14
rabbitmq_v3_7_0_milestone15
rabbitmq_v3_7_0_milestone2
rabbitmq_v3_7_0_milestone3
rabbitmq_v3_7_0_milestone4
rabbitmq_v3_7_0_milestone5
rabbitmq_v3_7_0_milestone7
rabbitmq_v3_7_0_milestone8
rabbitmq_v3_7_0_milestone9
v4.*
v4.0.0
v4.0.0.M1
v4.0.0.M2
v4.0.0.RC1
v4.0.0.RC2
v4.1.0
v4.1.0.RC1
v5.*
v5.0.0
v5.0.0.RC1
v5.1.0
v5.1.0.RC1
v5.10.0
v5.10.0.RC1
v5.10.0.RC2
v5.11.0.RC1
v5.12.0
v5.12.0.RC1
v5.13.0
v5.13.0.RC1
v5.13.0.RC2
v5.14.0
v5.14.0.RC1
v5.15.0
v5.15.0.RC1
v5.16.0
v5.16.0.RC1
v5.17.0
v5.17.0.RC1
v5.17.0.RC2
v5.2.0
v5.2.0.RC1
v5.4.0
v5.4.0.M1
v5.4.0.RC1
v5.4.0.RC2
v5.4.0.RC3
v5.5.0
v5.5.0.RC1
v5.6.0
v5.6.0.RC1
v5.7.0
v5.7.0.RC1
v5.8.0
v5.8.0.RC1
v5.8.0.RC2
v5.9.0
v5.9.0.RC1
Database specific
vanir_signatures_modified
"2026-07-22T02:50:02Z"
vanir_signatures
[
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"130518995842570652738354992219942058675",
"235768512400746470463056922105136583447",
"182062003750732002315116250312230754546",
"9135328589112565672063863611919595324",
"119708841080025768205144059254274589103",
"202939691671214968658618961532545774186",
"224884045546332667990599235792021707393",
"180614393696011899136483506458740927642",
"174116127054121005649731698213524952579",
"172067743892712703918649562038466686078",
"318513109664025920421125702464365034922",
"160767228388607021030673395143696797089",
"170039524453026618274711270705447073340",
"151736063782401084961316911393431063178",
"181254480433288871094460039820979579876",
"214294910019098809007369606093523910584",
"1765866244268871524643137444429033991",
"223974325191646893343560505796438218473",
"199962675250714799893460467700494417915"
]
},
"signature_version": "v1",
"source": "https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8",
"id": "CVE-2023-46120-1213dda1",
"target": {
"file": "src/main/java/com/rabbitmq/client/ConnectionFactory.java"
}
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"185738174607601888736472602156645685370",
"142003036452518149118953330572481871862",
"156598035906075614803579721113597406985",
"160747156463253529756420374711342028540",
"94056693774843244207735773679277498905",
"88832218369949534439536423122342497071",
"194483265433905511140238732142157130694",
"212153872314685710055206956494661511589",
"332948543156085097446031210631965759708",
"125968223061384375397911364505684399689",
"184112038743191364884694563317487186487",
"17532880156796500123990952416015745388",
"145257158403261132110091857892779074702",
"311992605275029553515385748989526887612",
"243482959835811074912383136497315989422",
"227555765313455741477619730375739858658",
"112174324697509321143705753847154487873",
"55459245216463281437040776590872831105"
]
},
"signature_version": "v1",
"source": "https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8",
"id": "CVE-2023-46120-13c6c7cb",
"target": {
"file": "src/main/java/com/rabbitmq/client/impl/CommandAssembler.java"
}
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"5308737882910170960433672733085676917",
"314034080702590502883469594815272776964",
"201690830560291080546039446876617381721",
"121387526314507247657541201624437676696",
"273955856274845639955491753762955220702",
"118583500327526325114876109353927228559",
"194855724843304798606315224501372988301",
"157241003011343061294538290270676375392",
"218731808220471873168904777551242662047",
"168359470429557079123167654481933218851",
"6893644043567237244529506542210703807",
"177565442750871892003140676414918872282",
"108864814949287471049586816195698973181",
"15886775832344860305702753098542511231",
"40469497645104550601198133890476727770",
"304625061051303958631415862155041404776"
]
},
"signature_version": "v1",
"source": "https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8",
"id": "CVE-2023-46120-1a3e0646",
"target": {
"file": "src/test/java/com/rabbitmq/client/test/TestUtils.java"
}
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 388.0,
"function_hash": "323360218485329805330503431069899236516"
},
"signature_version": "v1",
"source": "https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8",
"id": "CVE-2023-46120-1c8cf2c4",
"target": {
"function": "SocketChannelFrameHandlerFactory",
"file": "src/main/java/com/rabbitmq/client/impl/nio/SocketChannelFrameHandlerFactory.java"
}
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 409.0,
"function_hash": "144123790145209621536353820883704693942"
},
"signature_version": "v1",
"source": "https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8",
"id": "CVE-2023-46120-2cb9569b",
"target": {
"function": "buildFrameInOneGo",
"file": "src/test/java/com/rabbitmq/client/test/FrameBuilderTest.java"
}
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 1174.0,
"function_hash": "187652227900628908506303858331018839889"
},
"signature_version": "v1",
"source": "https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8",
"id": "CVE-2023-46120-34f04856",
"target": {
"function": "SocketChannelFrameHandlerState",
"file": "src/main/java/com/rabbitmq/client/impl/nio/SocketChannelFrameHandlerState.java"
}
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 201.0,
"function_hash": "305599252233589067135583162572943332860"
},
"signature_version": "v1",
"source": "https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8",
"id": "CVE-2023-46120-3cb5c024",
"target": {
"function": "SocketFrameHandlerFactory",
"file": "src/main/java/com/rabbitmq/client/impl/SocketFrameHandlerFactory.java"
}
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 126.0,
"function_hash": "48478382569912336814393582129788172084"
},
"signature_version": "v1",
"source": "https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8",
"id": "CVE-2023-46120-3fd4d44a",
"target": {
"function": "AMQCommand",
"file": "src/main/java/com/rabbitmq/client/impl/AMQCommand.java"
}
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"292506553734936468388352563078490456363",
"7107592038605338116830321771928798938",
"158548243400580821666204352741474200898",
"92713532258256788612918735814345997393",
"53338295590835624531609581959252397037",
"284403956791813253622016532797026699002",
"167891635843959264847399900029875286799",
"233463877063867928323707445811912324766",
"330467354138279384085408024945281073590",
"321097568578317156901001377626374759875",
"5814668016085380735671440012216867721",
"132478320957028603961401321179704571169",
"148325997387892326617407535328828504367",
"337738994550384960350598485589082617594",
"93650091777583899394392127934386357824",
"197314218712026769939038847644182430664",
"54998177475523755601038554538762764589"
]
},
"signature_version": "v1",
"source": "https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8",
"id": "CVE-2023-46120-449e1cce",
"target": {
"file": "src/main/java/com/rabbitmq/client/impl/AMQChannel.java"
}
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"85449900346258107391959314728826205250",
"275754491308528404552877751450795224123",
"73918837786756527808524937162563875058",
"340240566801086041954831518513706024034",
"329421933683475404429513648659272423517",
"217375921517525146512050294470545946270",
"221266198902858277370666134126352098410",
"130701016007443235054170557827294236670",
"149134459150477580982718953389080179244",
"122158168959462039156495513969021873036",
"135728013162782487816958285983161751176",
"332980954088257390566424990696482909917",
"112638330074391676237552961452841008139"
]
},
"signature_version": "v1",
"source": "https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8",
"id": "CVE-2023-46120-497d31cc",
"target": {
"file": "src/main/java/com/rabbitmq/client/impl/nio/SocketChannelFrameHandlerState.java"
}
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"250197599347533406960566252710018221346",
"314964030841082812158691527685542980193",
"241145068883225642676744360328991898899",
"322814349315779803543587559623160393650",
"202270226355814164460969306655031748363",
"167128984540838913621915618601853312268",
"268236104063791697039532845094970287045",
"181310798993500359824206266708058120339",
"186681836573556391850773505176558071876",
"323642276588391608337462746170124630119",
"132061786327306185372066851446360770206",
"309050576086815771238909019671266962689",
"219362379576787044815727879828446954709",
"65018725863991581477902835896721102698",
"164334344748001070571249780705256545182"
]
},
"signature_version": "v1",
"source": "https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8",
"id": "CVE-2023-46120-500ccaba",
"target": {
"file": "src/main/java/com/rabbitmq/client/impl/SocketFrameHandler.java"
}
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"128471742969122252358100282470821986824",
"161221195988037695156802853212704525593",
"55094828358844211603501483266008640914",
"210155384812136594251451929167348782087",
"92678701193628377087353935235395674999",
"233645765682382516267915662709648436304",
"189891077276357850828725427106000882843",
"214610734855512873618973918676983112846",
"275648151362066860300472902380677510786",
"106319583660769054293039647247667085869",
"37519473146207769085374848179731473566",
"77423588392838728603515838025180430669",
"40999485078724987740828499904553721184"
]
},
"signature_version": "v1",
"source": "https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8",
"id": "CVE-2023-46120-52157669",
"target": {
"file": "src/main/java/com/rabbitmq/client/impl/SocketFrameHandlerFactory.java"
}
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 252.0,
"function_hash": "130438997969700493744613948956211472723"
},
"signature_version": "v1",
"source": "https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8",
"id": "CVE-2023-46120-58b8e30f",
"target": {
"function": "SocketFrameHandler",
"file": "src/main/java/com/rabbitmq/client/impl/SocketFrameHandler.java"
}
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 732.0,
"function_hash": "96932893953712850088977818176347166516"
},
"signature_version": "v1",
"source": "https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8",
"id": "CVE-2023-46120-5e2e1853",
"target": {
"function": "buildFramesInOneGo",
"file": "src/test/java/com/rabbitmq/client/test/FrameBuilderTest.java"
}
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 149.0,
"function_hash": "248682845021860836932963328225904999036"
},
"signature_version": "v1",
"source": "https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8",
"id": "CVE-2023-46120-5edcf40d",
"target": {
"function": "SslEngineFrameBuilder",
"file": "src/main/java/com/rabbitmq/client/impl/nio/SslEngineFrameBuilder.java"
}
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"130838322149108328150674838397878673044",
"134306903613569096281830037872954750781",
"124287760518453569222542485410464238388",
"133980660694934506353838042173788884034",
"213050552308777328892701929193088004509",
"53772564692682781835206651459763297829",
"19542346223203092615677577417458450774",
"283024570750952431739433227254158751549",
"62650664611084360103241326769724444986",
"171104303605713486196254967762141065817"
]
},
"signature_version": "v1",
"source": "https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8",
"id": "CVE-2023-46120-66029cfe",
"target": {
"file": "src/main/java/com/rabbitmq/client/impl/nio/SocketChannelFrameHandlerFactory.java"
}
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 1548.0,
"function_hash": "222329247711069821925077384133671111240"
},
"signature_version": "v1",
"source": "https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8",
"id": "CVE-2023-46120-72bad796",
"target": {
"function": "AMQConnection",
"file": "src/main/java/com/rabbitmq/client/impl/AMQConnection.java"
}
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"73576270576588809678259227466557513827",
"138240438789842096597684896511945356611",
"333448548443190990790948903556345507826",
"12837257959563102041071214665131130564",
"294292773785413062944636755635156018986",
"177191308981115267047148503689430117413",
"44754047661069888361571939910659000707",
"25493605492022237604324751529054325558",
"188084234209968211297079705207946404570",
"337720940475316904133339987448650555938",
"164519571625690102199530503111256617757",
"234612546957728930575662666657271763658"
]
},
"signature_version": "v1",
"source": "https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8",
"id": "CVE-2023-46120-7392df5a",
"target": {
"file": "src/main/java/com/rabbitmq/client/impl/AMQCommand.java"
}
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"104662957560740974808578666035403138250",
"312465422780776074908520866286103868789",
"150015872844388784354562151394531793895",
"335567069270917405684334045524674430632",
"53008923237594724824781074375912689951",
"8387382043233525129007159140114556923",
"253475218309464836941618401879997867293",
"158803352247661919542315390721932773806"
]
},
"signature_version": "v1",
"source": "https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8",
"id": "CVE-2023-46120-74790773",
"target": {
"file": "src/main/java/com/rabbitmq/client/impl/AbstractFrameHandlerFactory.java"
}
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"312326623746813796466073732243918404282",
"83107432755475782285254884297949750140",
"11581336250417159351714188659955118253",
"270789341276816597715240281864729113687",
"173731518758731252893120877954241838197",
"132063848751382357720984481576466314851",
"309035067083907415088489473890704617597",
"307201822441952062791062079223743922072",
"231061049668579203867661848654154888893",
"299371279192697447696994492112577595026",
"83132959825001351670058518847891740631",
"84861339630719280094150543827633381486",
"222024302613383095213042350612600128423",
"39860444431439623156106277147294040281",
"245678351401827420119463739442915832533",
"195842966842593706073764887166551377993"
]
},
"signature_version": "v1",
"source": "https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8",
"id": "CVE-2023-46120-79514fba",
"target": {
"file": "src/test/java/com/rabbitmq/client/test/FrameBuilderTest.java"
}
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"255257189923269537362730858384448015727",
"298295344823783066697746269865540837398",
"301581536944490246192419391706390765139",
"181716543647186171320561380758707738312",
"103744647740861693748988340327582217667",
"187716004260767935166433557953577837225"
]
},
"signature_version": "v1",
"source": "https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8",
"id": "CVE-2023-46120-820b9210",
"target": {
"file": "src/main/java/com/rabbitmq/client/impl/ConnectionParams.java"
}
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 312.0,
"function_hash": "222244271338740394753535371424069686878"
},
"signature_version": "v1",
"source": "https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8",
"id": "CVE-2023-46120-827bf617",
"target": {
"function": "consumeHeaderFrame",
"file": "src/main/java/com/rabbitmq/client/impl/CommandAssembler.java"
}
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 1959.0,
"function_hash": "248210858573903836350527063490688787141"
},
"signature_version": "v1",
"source": "https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8",
"id": "CVE-2023-46120-845cc851",
"target": {
"function": "create",
"file": "src/main/java/com/rabbitmq/client/impl/nio/SocketChannelFrameHandlerFactory.java"
}
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 118.0,
"function_hash": "258058651251131482636200101947702317500"
},
"signature_version": "v1",
"source": "https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8",
"id": "CVE-2023-46120-8b8fbbd6",
"target": {
"function": "readFrame",
"file": "src/main/java/com/rabbitmq/client/impl/SocketFrameHandler.java"
}
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 1248.0,
"function_hash": "303511830459628003982605771469428732874"
},
"signature_version": "v1",
"source": "https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8",
"id": "CVE-2023-46120-987d698c",
"target": {
"function": "readFrame",
"file": "src/main/java/com/rabbitmq/client/impl/nio/FrameBuilder.java"
}
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"256904198408085027789700360140653731766",
"109393292060014416677052123862965006966",
"202051829573121421985266174649860931351",
"206385439610057466384636317141325664546",
"181248270685752537496174494506243749448",
"337751065334116868919569819863579912745",
"152878428638427469903188881369738305080",
"34272896020509364069164581325290537371",
"167356188253979259861513718552734023910",
"90971516406082139511249581667069419311",
"207120686117943908884335326932463193843",
"81207269061272268637557202127654566846",
"234548534077313475075854083996894356256"
]
},
"signature_version": "v1",
"source": "https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8",
"id": "CVE-2023-46120-9a713be8",
"target": {
"file": "src/main/java/com/rabbitmq/client/impl/AMQConnection.java"
}
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 1216.0,
"function_hash": "122230468043342786314473302020000844091"
},
"signature_version": "v1",
"source": "https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8",
"id": "CVE-2023-46120-a1f9f02e",
"target": {
"function": "params",
"file": "src/main/java/com/rabbitmq/client/ConnectionFactory.java"
}
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 46.0,
"function_hash": "137805300929101099424709363870784524143"
},
"signature_version": "v1",
"source": "https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8",
"id": "CVE-2023-46120-b50b1b9d",
"target": {
"function": "AMQCommand",
"file": "src/main/java/com/rabbitmq/client/impl/AMQCommand.java"
}
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 158.0,
"function_hash": "50186938414228539590406689249570950797"
},
"signature_version": "v1",
"source": "https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8",
"id": "CVE-2023-46120-b6633c2b",
"target": {
"function": "handleFrame",
"file": "src/main/java/com/rabbitmq/client/impl/AMQChannel.java"
}
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 140.0,
"function_hash": "300893615115528311812607259563729828093"
},
"signature_version": "v1",
"source": "https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8",
"id": "CVE-2023-46120-b7bf189b",
"target": {
"function": "SocketFrameHandlerFactory",
"file": "src/main/java/com/rabbitmq/client/impl/SocketFrameHandlerFactory.java"
}
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 100.0,
"function_hash": "198207514292419398494959738629231135784"
},
"signature_version": "v1",
"source": "https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8",
"id": "CVE-2023-46120-ba8e4c3b",
"target": {
"function": "FrameBuilder",
"file": "src/main/java/com/rabbitmq/client/impl/nio/FrameBuilder.java"
}
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 111.0,
"function_hash": "317465661961417811549698021804231999524"
},
"signature_version": "v1",
"source": "https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8",
"id": "CVE-2023-46120-bdcd20e2",
"target": {
"function": "create",
"file": "src/main/java/com/rabbitmq/client/impl/SocketFrameHandlerFactory.java"
}
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"199376313420356813546172988969084082332",
"91395476648003173746778411353966953289",
"261960122279615876406725533521151963374",
"63089973400667239874568982976881178187",
"265772093568897905157471037038538490735",
"269693008382332594994600361982972215002",
"150808186862726177382180160912695055482",
"35616228746015703053100875666396476977",
"339712996911994543552004566051957197754",
"308614067976142601570362919430524534470",
"144097030649198811601686885986963927064",
"274435680657438984812280943898704301874",
"152744813078082015431000640423246141724",
"168874046467746236527903295809485786627",
"103342906904948735197437154861622530770",
"248804084771421454258136709608137144560",
"150329879466294066672375420572996346741",
"324024254817755175081605973328839105483",
"233514090645647202074615447195880665770",
"245249179232221624030240147012539262747"
]
},
"signature_version": "v1",
"source": "https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8",
"id": "CVE-2023-46120-bdda4132",
"target": {
"file": "src/main/java/com/rabbitmq/client/impl/nio/FrameBuilder.java"
}
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 570.0,
"function_hash": "205299984238298357858690212878891170055"
},
"signature_version": "v1",
"source": "https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8",
"id": "CVE-2023-46120-c59e400f",
"target": {
"function": "buildFrameInSeveralCalls",
"file": "src/test/java/com/rabbitmq/client/test/FrameBuilderTest.java"
}
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"37506172778485322219266165498804976418",
"99876962501066551499066695133814180312",
"134405913265189302939467564972896645127",
"65012919133385714965867213837589844035",
"102961441989383393674830311886662314195",
"206417342816214034625455586129656166795",
"18501777297747175577784395100884116461",
"52046717781417495102202154673795768398",
"197170379482293324129197729603441946365",
"121693867809864950891806085815700080147",
"51649891457267571025949511807818002848",
"339703507328664904643167719119723533625",
"95030938372981687214805037025361315354"
]
},
"signature_version": "v1",
"source": "https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8",
"id": "CVE-2023-46120-c9dbb6e5",
"target": {
"file": "src/main/java/com/rabbitmq/client/impl/Frame.java"
}
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 535.0,
"function_hash": "204573829005351013148556183259365485881"
},
"signature_version": "v1",
"source": "https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8",
"id": "CVE-2023-46120-cfce0e5c",
"target": {
"function": "createFrameHandlerFactory",
"file": "src/main/java/com/rabbitmq/client/ConnectionFactory.java"
}
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 503.0,
"function_hash": "239963615497413851711687725405617997513"
},
"signature_version": "v1",
"source": "https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8",
"id": "CVE-2023-46120-d2589e03",
"target": {
"function": "readFrom",
"file": "src/main/java/com/rabbitmq/client/impl/Frame.java"
}
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 1399.0,
"function_hash": "139414033396989903972205295773915706641"
},
"signature_version": "v1",
"source": "https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8",
"id": "CVE-2023-46120-dddc2bd0",
"target": {
"function": "protocolMismatchHeader",
"file": "src/test/java/com/rabbitmq/client/test/FrameBuilderTest.java"
}
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 71.0,
"function_hash": "195837290326181743951508858652644930296"
},
"signature_version": "v1",
"source": "https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8",
"id": "CVE-2023-46120-e61accdd",
"target": {
"function": "SocketFrameHandler",
"file": "src/main/java/com/rabbitmq/client/impl/SocketFrameHandler.java"
}
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 369.0,
"function_hash": "222492852426030931563247415955234089054"
},
"signature_version": "v1",
"source": "https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8",
"id": "CVE-2023-46120-e75439eb",
"target": {
"function": "AMQChannel",
"file": "src/main/java/com/rabbitmq/client/impl/AMQChannel.java"
}
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 516.0,
"function_hash": "135784434424084194077805203625642901343"
},
"signature_version": "v1",
"source": "https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8",
"id": "CVE-2023-46120-f219cbc4",
"target": {
"function": "CommandAssembler",
"file": "src/main/java/com/rabbitmq/client/impl/CommandAssembler.java"
}
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"276478969536757434069857239505448964908",
"44634588997750868689284552076252221893",
"177526035997505306335036064810921982450",
"259044820119753209442258514720619503987",
"153588265012436469111573839742070363719",
"152250501017720729047875391933256526594"
]
},
"signature_version": "v1",
"source": "https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8",
"id": "CVE-2023-46120-f9090131",
"target": {
"file": "src/main/java/com/rabbitmq/client/impl/nio/SslEngineFrameBuilder.java"
}
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 125.0,
"function_hash": "276849226725221505050513190310608889350"
},
"signature_version": "v1",
"source": "https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8",
"id": "CVE-2023-46120-fa06ab8c",
"target": {
"function": "AbstractFrameHandlerFactory",
"file": "src/main/java/com/rabbitmq/client/impl/AbstractFrameHandlerFactory.java"
}
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 59.0,
"function_hash": "188206164586715878699394529292192398624"
},
"signature_version": "v1",
"source": "https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8",
"id": "CVE-2023-46120-fce3114c",
"target": {
"function": "AMQCommand",
"file": "src/main/java/com/rabbitmq/client/impl/AMQCommand.java"
}
}
]
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-46120.json"