USN-8869-1: RabbitMQ Server vulnerability
AI summary · grok-4.7
Ubuntu warns RabbitMQ mishandles HTTP/2 headers, possibly letting attackers exhaust memory and cause a denial of service.
Ubuntu Security Notice USN-8869-1 covers a RabbitMQ Server flaw in how certain HTTP/2 headers are handled. Ubuntu says an attacker could possibly trigger a denial of service through memory exhaustion. The notice does not name a CVE or report that exploitation has been observed.
- Ubuntu published USN-8869-1 for RabbitMQ Server.
- Flaw is incorrect handling of certain HTTP/2 headers.
- An attacker could exhaust memory and cause a denial of service.
- The notice does not report active exploitation.
Full article
It was discovered that RabbitMQ Server incorrectly handled certain HTTP/2 headers. An attacker could possibly use this issue to cause a denial of service via memory exhaustion.
This source does not provide full text. Read it at ubuntu.com.