Bug 2518034 (CVE-2026-69219) - CVE-2026-69219 com.rabbitmq/amqp-client: RabbitMQ Java client: Denial of Service via oversized memory allocation during pre-authentication
Summary: CVE-2026-69219 com.rabbitmq/amqp-client: RabbitMQ Java client: Denial of Serv...
Keywords:
Status: NEW
Alias: CVE-2026-69219
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
high
high
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-08-18 16:33 UTC by OSIDB Bzimport
Modified: 2026-09-23 16:24 UTC (History)
6 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2026-08-18 16:33:27 UTC
The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.1, src/main/java/com/rabbitmq/client/impl/ValueReader.java uses ValueReader.readBytes to accept a wire-declared contentLength below Integer.MAX_VALUE and allocate a byte array before checking the bytes available in the frame. A malicious AMQP peer can send a LongString or byte-array field with type tag S and a declared length such as 0x7FFFFFFE during the pre-authentication connection.start server-properties table, causing an approximately 2 GB allocation and OutOfMemoryError before readFully consumes data. The resulting memory exhaustion can terminate the JVM and cause denial of service. This issue is fixed in version 5.33.1.


Note You need to log in before you can comment on or make changes to this bug.