The remote Ubuntu 14.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS / Pro Realtime 22.04 LTS / Pro Realtime 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8724-1 advisory.

    It was discovered that the rabbitmq-c command-line tools only accepted credentials on the command line,     making them visible to other local users through the process list. An attacker could possibly use this to     obtain sensitive credentials. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04     LTS, and Ubuntu 20.04 LTS. (CVE-2023-35789)

    It was discovered that rabbitmq-c did not correctly compute AMQP frame lengths, leading to a size_t     underflow. A remote attacker could possibly use this to cause rabbitmq-c to crash, resulting in a denial     of service, or possibly expose sensitive information. This issue only affected Ubuntu 14.04 LTS, Ubuntu     16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2026-44235)

    It was discovered that rabbitmq-c did not properly validate the frame size during the AMQP login     handshake. A remote attacker could possibly use this to cause a heap buffer overflow, resulting in a     denial of service or possibly the execution of arbitrary code. This issue only affected Ubuntu 14.04 LTS,     Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2026-44236)

    It was discovered that rabbitmq-c did not correctly validate the length of decoded bytes fields, leading     to an integer overflow in a bounds check on 32-bit systems. A remote attacker controlling a broker, or     able to intercept an unencrypted connection, could possibly use this to cause an out-of-bounds read,     resulting in a denial of service or the exposure of sensitive information. (CVE-2026-59986)

    It was discovered that rabbitmq-c did not validate the body fragment length when serialising an AMQP body     frame with the amqp_send_frame() API. An attacker could possibly use this to cause a heap buffer overflow,     resulting in a denial of service (application crash) or possibly the execution of arbitrary code. This     issue did not affect Ubuntu 14.04 LTS. (CVE-2026-61547)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2024:0059 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2023-35789:
    An issue was discovered in the C AMQP client library (aka rabbitmq-c) through 0.13.0 for RabbitMQ.
    Credentials can only be entered on the command line (e.g., for amqp-publish or amqp-consume) and are thus     visible to local attackers by listing a process and its arguments.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2023:0298 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

      CVE-2023-35789:
      An issue was discovered in the C AMQP client library (aka rabbitmq-c) through 0.13.0 for RabbitMQ.
    Credentials can only be entered on the command line (e.g., for amqp-publish or amqp-consume) and are thus     visible to local attackers by listing a process and its arguments.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0136 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2023-35789:
    An issue was discovered in the C AMQP client library (aka rabbitmq-c) through 0.13.0 for RabbitMQ.
    Credentials can only be entered on the command line (e.g., for amqp-publish or amqp-consume) and are thus     visible to local attackers by listing a process and its arguments.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-2023_6482 advisory.

    * rabbitmq-c/librabbitmq: Insecure credentials submission (CVE-2023-35789)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002168 advisory.

    An issue was discovered in the C AMQP client library (aka rabbitmq-c) through 0.13.0 for RabbitMQ.
    Credentials can only be entered on the command line (e.g., for amqp-publish or amqp-consume) and are thus     visible to local attackers by listing a process and its arguments.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2023:7150 advisory.

  - An issue was discovered in the C AMQP client library (aka rabbitmq-c) through 0.13.0 for RabbitMQ.
    Credentials can only be entered on the command line (e.g., for amqp-publish or amqp-consume) and are thus     visible to local attackers by listing a process and its arguments. (CVE-2023-35789)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:7150 advisory.

    The librabbitmq packages provide an Advanced Message Queuing Protocol (AMQP) client library that allows     you to communicate with AMQP servers using protocol version 0-9-1.

    Security Fix(es):

    * rabbitmq-c/librabbitmq: Insecure credentials submission (CVE-2023-35789)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.9 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of librabbitmq installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-35789 advisory.

  - An issue was discovered in the C AMQP client library (aka rabbitmq-c) through 0.13.0 for RabbitMQ.
    Credentials can only be entered on the command line (e.g., for amqp-publish or amqp-consume) and are thus     visible to local attackers by listing a process and its arguments. (CVE-2023-35789)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2023:6482 advisory.

    * rabbitmq-c/librabbitmq: Insecure credentials submission (CVE-2023-35789)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 7.02, has librabbitmq packages installed that are affected by a vulnerability:

  - An issue was discovered in the C AMQP client library (aka rabbitmq-c) through 0.13.0 for RabbitMQ.
    Credentials can only be entered on the command line (e.g., for amqp-publish or amqp-consume) and are thus     visible to local attackers by listing a process and its arguments. (CVE-2023-35789)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
344621	Ubuntu 14.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS / Pro Realtime 22.04 LTS / Pro Realtime 24.04 LTS : rabbitmq-c vulnerabilities (USN-8724-1)	Nessus	Ubuntu Local Security Checks	2026/9/10	2026/9/10	medium
236096	Alibaba Cloud Linux 3 : 0059: librabbitmq (ALINUX3-SA-2024:0059)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/5/14	2025/5/14	medium
238534	TencentOS Server 3: librabbitmq (TSSA-2023:0298)	Nessus	Tencent Local Security Checks	2025/6/16	2025/11/20	medium
238660	TencentOS Server 4: librabbitmq (TSSA-2025:0136)	Nessus	Tencent Local Security Checks	2025/6/16	2025/11/20	medium
357023	Rocky Linux 9 [CIQ] Security Update: librabbitmq / librabbitmq-debuginfo / librabbitmq-debugsource / etc (crlsa-2023_6482)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	medium
349057	Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: librabbitmq (UTSA-2023-002168)	Nessus	Unity Linux Local Security Checks	2026/9/22	2026/9/22	medium
185641	CentOS 8 : librabbitmq (CESA-2023:7150)	Nessus	CentOS Local Security Checks	2023/11/14	2023/11/14	medium
185673	RHEL 8 : librabbitmq (RHSA-2023:7150)	Nessus	Red Hat Local Security Checks	2023/11/14	2024/11/7	medium
295418	Azure Linux 3.0 Security Update: librabbitmq (CVE-2023-35789)	Nessus	Azure Linux Local Security Checks	2026/1/22	2026/1/22	medium
322766	RockyLinux 9 : librabbitmq (RLSA-2023:6482)	Nessus	Rocky Linux Local Security Checks	2026/6/25	2026/6/25	medium
343559	NewStart CGSL MAIN 7.02 : librabbitmq Vulnerability (NS-SA-2026-0102)	Nessus	NewStart CGSL Local Security Checks	2026/9/8	2026/9/8	medium

检测

插件搜索

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium