Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
RabbitMQ Server can crash from crafted web request
published 29 days ago
Summary
The RabbitMQ Server software may mishandle certain web request headers, which can cause it to run out of memory and stop working. This could interrupt messaging services that rely on RabbitMQ. Update the server to the latest version or apply the vendor's recommended patch to prevent the issue.
What to do
- Update canonical rabbitmq-server to version 3.8.3-0ubuntu0.3+esm1.
- Update canonical rabbitmq-server to version 3.9.27-0ubuntu0.5.
- Update canonical rabbitmq-server to version 3.12.1-1ubuntu1.6.
- Update canonical rabbitmq-server to version 4.0.5-10ubuntu5.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:Pro:20.04:LTS | canonical | rabbitmq-server |
< 3.8.3-0ubuntu0.3+esm1 Fix: upgrade to 3.8.3-0ubuntu0.3+esm1
|
| Ubuntu:22.04:LTS | canonical | rabbitmq-server |
< 3.9.27-0ubuntu0.5 Fix: upgrade to 3.9.27-0ubuntu0.5
|
| Ubuntu:24.04:LTS | canonical | rabbitmq-server |
< 3.12.1-1ubuntu1.6 Fix: upgrade to 3.12.1-1ubuntu1.6
|
| Ubuntu:26.04:LTS | canonical | rabbitmq-server |
< 4.0.5-10ubuntu5.1 Fix: upgrade to 4.0.5-10ubuntu5.1
|
Original advisory text
rabbitmq-server vulnerability
It was discovered that RabbitMQ Server incorrectly handled certain HTTP/2
headers. An attacker could possibly use this issue to cause a denial of
service via memory exhaustion.
headers. An attacker could possibly use this issue to cause a denial of
service via memory exhaustion.
References
- https://ubuntu.com/security/notices/USN-8869-1 Vendor Advisory
- https://ubuntu.com/security/CVE-2026-59248 Third Party Advisory
Timeline
Published6 Oct 2026
Updated6 Oct 2026
First seen6 Oct 2026
Sources
USN-8869-1 · OSV
Track software like this
Free during beta