Known vulnerabilities in rabbitmq-server (Ubuntu package) 3.7.8-4ubuntu2
Vendor:
Canonical Ltd.
Software:
rabbitmq-server (Ubuntu package)
Version:
3.7.8-4ubuntu2
Software CPE:
cpe:2.3:o:canonical:rabbitmq-server_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website:
https://www.ubuntu.com/
Total vulnerabilities:
12
Public exploits:
0
Known exploited (KEV):
0
Vulnerabilities by Severity
3.5.7-1ubuntu0.16.04.4+esm3
3.8.3-0ubuntu0.3+esm2
3.6.10-1ubuntu0.5+esm1
4.3.2-4ubuntu3
4.0.5-10ubuntu5.2
3.9.27-0ubuntu0.3
3.9.27-0ubuntu0.6
2.6.1-1ubuntu1
2.6.1-1ubuntu2
2.6.1-1ubuntu3
2.6.1-1ubuntu4
2.7.1-0ubuntu1
2.7.1-0ubuntu2
2.7.1-0ubuntu3
3.12.1-1ubuntu1.3
3.12.1-1ubuntu1.4
3.12.1-1ubuntu1.7
2.4.1-1ubuntu1
2.4.1-1ubuntu2
2.5.0-1ubuntu1
2.5.0-1ubuntu2
2.1.0-1ubuntu1
2.2.0-0ubuntu1
2.3.1-1ubuntu1
4.0.5-10ubuntu1
4.0.5-10ubuntu2
4.0.5-10ubuntu3
4.0.5-10ubuntu4
4.0.5-10ubuntu5
4.0.5-8ubuntu2.1
1.8.0-1ubuntu1
1.8.0-1ubuntu2
1.7.2-1
1.7.2-1ubuntu1
3.8.3-0ubuntu0.3+esm1
3.9.27-0ubuntu0.5
3.12.1-1ubuntu1.6
4.0.5-10ubuntu5.1
1.5.5-0ubuntu1
1.5.5-2ubuntu1
1.6.0-1ubuntu1
1.5.1-0ubuntu1
1.5.3-0ubuntu1
1.5.4-0ubuntu1
3.1.5-1
4.0.5-8ubuntu2
4.0.5-2ubuntu2.1
4.0.5-7
4.0.5-8
4.0.5-8ubuntu1
4.0.5-3
4.0.5-4
4.0.5-5
4.0.5-6
4.0.5-1
4.0.5-2
4.0.5-2ubuntu1
3.12.1-1ubuntu2
3.12.1-1ubuntu1
3.12.1-1ubuntu1.1
3.12.1-1
3.10.8-1
3.10.8-1.1
3.9.27-0ubuntu0.1
3.9.13-1ubuntu0.22.10.1
3.9.13-1ubuntu0.22.04.1
3.9.13-1
3.9.8-6
3.9.8-4
3.9.8-5
3.9.8-3
3.9.8-2
3.9.8-1
3.9.4-1
3.9.4-1.1
3.9.4-1.2
3.8.9-3ubuntu1
3.8.9-3
3.8.9-2
3.8.9-1
3.8.5-1ubuntu0.1
3.8.3-1
3.8.5-1
3.8.3-0ubuntu1
3.8.3-0ubuntu0.1
3.8.2-0ubuntu1.4
3.8.2-0ubuntu1.2
3.8.2-0ubuntu1.1
3.6.10-1ubuntu0.2
3.5.7-1ubuntu0.16.04.3
3.12.6-1
3.12.10-1
3.12.12-1
4.0.5-6ubuntu1
4.0.5-2ubuntu2
3.8.3-0ubuntu0.3
3.9.27-0ubuntu0.2
3.12.1-1ubuntu1.2
3.12.1-1ubuntu2.1
3.8.3-0ubuntu0.2
3.8.2-0ubuntu1.5
3.9.13-1ubuntu0.22.04.2
3.10.8-1.1ubuntu0.1
3.12.1-1ubuntu0.1
Ubuntu Pro
3.8.2-0ubuntu1.3
3.8.5-1ubuntu0.2
3.8.9-2ubuntu0.1
3.6.10-1ubuntu0.5
3.6.10-1ubuntu0.4
3.6.10-1ubuntu0.3
3.5.7-1ubuntu0.16.04.4
3.8.2
3.8.2-0ubuntu2
3.7.8
3.6.10
3.5.7
3.2.4
2.7.1
2.7.1-0ubuntu4
3.8.2-0ubuntu1~ubuntu19.10.1
3.6.10-1ubuntu0.1
3.8.2-0ubuntu1~ubuntu18.04.1
3.8.2-0ubuntu1
3.7.8-5
3.7.18-1
3.7.8-4ubuntu2
3.7.8-4ubuntu1
3.7.8-1
3.7.8-2
3.7.8-3
3.7.8-4
3.5.7-1ubuntu0.16.04.2
3.2.4-1ubuntu0.1
3.6.5-1
3.6.6-1
3.6.10-1
3.5.7-1ubuntu0.16.10.1
3.5.7-1ubuntu0.16.04.1
3.5.7-1
3.5.4-2
3.5.4-3
3.5.4-3.1
3.5.4-1
3.5.1-2
3.5.1-1
3.4.3-2
3.4.3-1
3.4.2-4
3.4.2-3
1.5.0-1
1.5.0-2
1.5.0-3
1.5.0-4
1.5.0-5
1.5.4-1
1.5.4-2
1.5.4-3
1.5.4-4
1.5.5-1
1.5.5-2
1.5.5-3
1.6.0-1
1.7.0-1
1.7.0-2
1.7.0-3
1.8.0-1
1.8.1-1
2.0.0-1
2.0.0-2
2.1.0-1
2.2.0-1
2.3.1-1
2.4.0-1
2.4.1-1
2.5.0-1
2.6.1-1
2.6.1-2
2.8.0-1
2.8.1-1
2.8.2-1
2.8.2-2
2.8.3-1
2.8.4-1
2.8.5-1
2.8.6-1
2.8.7-1
3.0.0-1
3.0.1-1
3.0.2-1
3.0.3-1
3.0.4-1
3.1.0-1
3.1.1-1
3.1.2-1
3.1.3-1
3.1.4-1
3.2.0-1
3.2.1-1
3.2.2-1
3.2.3-1
3.2.4-1
3.2.4-1.1
3.3.0-1
3.3.1-1
3.3.3-1
3.3.4-1
3.3.5-1
3.4.1-1
3.4.2-1
3.4.2-2
Vulnerabilities (12)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU139296 - Unchecked Return Value CVE-2026-67409 |
CWE-252 | Medium | 3.5.7-1ubuntu0.16.04.4+esm3, 3.6.10-1ubuntu0.5+esm1, 3.8.3-0ubuntu0.3+esm2, 3.9.27-0ubuntu0.6, 3.12.1-1ubuntu1.7, 4.0.5-10ubuntu5.2 | 24.07.2026 |
SB2026072454 SB20260928420 SB20260928421 and 1 more |
||
| #VU139288 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-67239 |
CWE-79 | Medium | 3.5.7-1ubuntu0.16.04.4+esm3, 3.6.10-1ubuntu0.5+esm1, 3.8.3-0ubuntu0.3+esm2, 3.9.27-0ubuntu0.6, 3.12.1-1ubuntu1.7, 4.0.5-10ubuntu5.2 | 24.07.2026 |
SB2026072454 SB2026103124 |
||
| #VU137289 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-67237 |
CWE-79 | Medium | 3.5.7-1ubuntu0.16.04.4+esm3, 3.6.10-1ubuntu0.5+esm1, 3.8.3-0ubuntu0.3+esm2, 3.9.27-0ubuntu0.6, 3.12.1-1ubuntu1.7, 4.0.5-10ubuntu5.2 | 10.07.2026 |
SB2026071004 SB2026103124 |
||
| #VU137288 - Cleartext Storage of Sensitive Information CVE-2026-67236 |
CWE-312 | Medium | 3.5.7-1ubuntu0.16.04.4+esm3, 3.6.10-1ubuntu0.5+esm1, 3.8.3-0ubuntu0.3+esm2, 3.9.27-0ubuntu0.6, 3.12.1-1ubuntu1.7, 4.0.5-10ubuntu5.2 | 10.07.2026 |
SB2026071004 SB2026103124 |
||
| #VU137258 - Allocation of Resources Without Limits or Throttling CVE-2026-67235 |
CWE-770 | Low | 3.5.7-1ubuntu0.16.04.4+esm3, 3.6.10-1ubuntu0.5+esm1, 3.8.3-0ubuntu0.3+esm2, 3.9.27-0ubuntu0.6, 3.12.1-1ubuntu1.7, 4.0.5-10ubuntu5.2 | 09.07.2026 |
SB2026070934 SB2026103124 |
||
| #VU137254 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-66077 |
CWE-79 | Low | 3.5.7-1ubuntu0.16.04.4+esm3, 3.6.10-1ubuntu0.5+esm1, 3.8.3-0ubuntu0.3+esm2, 3.9.27-0ubuntu0.6, 3.12.1-1ubuntu1.7, 4.0.5-10ubuntu5.2 | 09.07.2026 |
SB2026070934 SB2026103124 |
||
| #VU137252 - Allocation of Resources Without Limits or Throttling CVE-2026-66079 |
CWE-770 | Medium | 3.5.7-1ubuntu0.16.04.4+esm3, 3.6.10-1ubuntu0.5+esm1, 3.8.3-0ubuntu0.3+esm2, 3.9.27-0ubuntu0.6, 3.12.1-1ubuntu1.7, 4.0.5-10ubuntu5.2 | 09.07.2026 |
SB2026070934 SB2026103124 |
||
| #VU137251 - Improper Handling of Highly Compressed Data (Data Amplification) CVE-2026-67232 |
CWE-409 | Medium | 3.5.7-1ubuntu0.16.04.4+esm3, 3.6.10-1ubuntu0.5+esm1, 3.8.3-0ubuntu0.3+esm2, 3.9.27-0ubuntu0.6, 3.12.1-1ubuntu1.7, 4.0.5-10ubuntu5.2 | 09.07.2026 |
SB2026070934 SB2026103124 |
||
| #VU137250 - Improper Certificate Validation CVE-2026-67231 |
CWE-295 | High | 3.5.7-1ubuntu0.16.04.4+esm3, 3.6.10-1ubuntu0.5+esm1, 3.8.3-0ubuntu0.3+esm2, 3.9.27-0ubuntu0.6, 3.12.1-1ubuntu1.7, 4.0.5-10ubuntu5.2 | 09.07.2026 |
SB2026070934 SB2026103124 |
||
| #VU137242 - Improper Certificate Validation CVE-2026-67404 |
CWE-295 | High | 3.5.7-1ubuntu0.16.04.4+esm3, 3.6.10-1ubuntu0.5+esm1, 3.8.3-0ubuntu0.3+esm2, 3.9.27-0ubuntu0.6, 3.12.1-1ubuntu1.7, 4.0.5-10ubuntu5.2 | 09.07.2026 |
SB2026070934 SB2026103124 |
||
| #VU137235 - Overly Permissive Cross-domain Whitelist CVE-2026-66070 |
CWE-942 | High | 3.5.7-1ubuntu0.16.04.4+esm3, 3.6.10-1ubuntu0.5+esm1, 3.8.3-0ubuntu0.3+esm2, 3.9.27-0ubuntu0.6, 3.12.1-1ubuntu1.7, 4.0.5-10ubuntu5.2 | 09.07.2026 |
SB2026070934 SB2026103124 |
||
| #VU137232 - Resource exhaustion CVE-2026-67238 |
CWE-400 | Low | 3.5.7-1ubuntu0.16.04.4+esm3, 3.6.10-1ubuntu0.5+esm1, 3.8.3-0ubuntu0.3+esm2, 3.9.27-0ubuntu0.6, 3.12.1-1ubuntu1.7, 4.0.5-10ubuntu5.2 | 09.07.2026 |
SB2026070934 SB2026103124 |