PT-2023-8230 · Rabbitmq+1 · Rabbitmq Java Client+1

Liankee · Published 2023-10-24 · Updated 2026-05-18 · CVE-2023-46120

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Medium

Base vector

AV:N/AC:L/Au:M/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions RabbitMQ Java client versions prior to 5.18.0

Description The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. maxBodyLebgth was not used when receiving Message objects. Attackers could send a very large Message causing a memory overflow and triggering an OOM Error. Users of RabbitMQ may suffer from DoS attacks from RabbitMQ Java client which will ultimately exhaust the memory of the consumer.

Recommendations To resolve the issue, update to version 5.18.0 or later. As a temporary workaround, consider restricting the size of messages received by the RabbitMQ Java client to prevent memory overflow. Restrict access to the RabbitMQ Java client to minimize the risk of exploitation.

Exploit

Fix

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

BDU:2024-00247

CLEANSTART-2026-KU61465

CLEANSTART-2026-LE11246

CLEANSTART-2026-RN56220

CVE-2023-46120

GHSA-MM8H-8587-P46H

OPENSUSE-SU-2024:13750-1

Affected Products

Rabbitmq Java Client

Red Os

References · 193

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/46xxx/CVE-2023-46120.json · Exploit
• 🔥 https://github.com/rabbitmq/rabbitmq-java-client/security/advisories/GHSA-mm8h-8587-p46h · Exploit
• https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8 · Patch
• https://github.com/rabbitmq/rabbitmq-java-client/issues/1062 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-42583 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-0341 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-1320 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-46120 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-58057 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-6763 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-41973 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-1471 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-55163 · Security Note
• https://osv.dev/vulnerability/CVE-2023-46120 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-46120 · Security Note