Heap-based buffer overflow in RabbitMQ C client - CVE-2026-44236

Vulnerability identifier: #VU147321

CSH Severity: Medium

CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-44236

CWE-ID: CWE-122

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to cause a denial of service.

The vulnerability exists due to a heap-based buffer overflow in amqp_login_inner() and the outbound frame buffer handling when processing a server-supplied connection.tune frame during the amqp_login() handshake. A remote attacker can send a connection.tune frame with an undersized frame_max value to cause a denial of service.

User interaction is required for a victim application to connect to the malicious AMQP server.

RabbitMQ C client
Debian Linux
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
Ubuntu
openEuler
librabbitmq-tools-debuginfo (Red Hat package)
librabbitmq-devel (Red Hat package)
librabbitmq-debugsource (Red Hat package)
librabbitmq-debuginfo (Red Hat package)
librabbitmq
librabbitmq-debuginfo
librabbitmq-debugsource
librabbitmq-devel
librabbitmq-help
librabbitmq (Red Hat package)
librabbitmq (Ubuntu package)
librabbitmq (Debian package)

Install security update from vendor's website.

RabbitMQ C client - update to 0.16.0
librabbitmq-tools-debuginfo (Red Hat package) - update to 0.9.0-6.el8_10
librabbitmq-devel (Red Hat package) - update to 0.9.0-6.el8_10
librabbitmq-debugsource (Red Hat package) - update to 0.9.0-6.el8_10
librabbitmq-debuginfo (Red Hat package) - update to 0.9.0-6.el8_10
librabbitmq - update to 0.9.0-8
librabbitmq-debuginfo - update to 0.9.0-8
librabbitmq-debugsource - update to 0.9.0-8
librabbitmq-devel - update to 0.9.0-8
librabbitmq-help - update to 0.9.0-8
librabbitmq (Red Hat package) - update to 0.14.0-3.el10_2.1
librabbitmq (Ubuntu package) - addressed in versions 0.4.1-1ubuntu0.1~esm2, 0.7.1-1ubuntu0.2+esm1, 0.8.0-1ubuntu0.18.04.2+esm1, 0.10.0-1ubuntu0.20.04.1~esm1, 0.10.0-1ubuntu2.1, 0.10.0-1ubuntu2.2, 0.11.0-1ubuntu0.1, 0.11.0-1ubuntu0.2, 0.15.0-1ubuntu0.25.10.1, 0.15.0-1ubuntu0.26.04.1, 0.15.0-1ubuntu0.26.04.2
librabbitmq (Debian package) - update to 0.15.0-1+deb13u1

• https://github.com/alanxz/rabbitmq-c/security/advisories/GHSA-jh48-qjf5-fx5v

• Multiple vulnerabilities in RabbitMQ C client
• Debian update for librabbitmq
• openEuler update for librabbitmq
• Ubuntu update for librabbitmq
• Ubuntu update for librabbitmq
• Red Hat Enterprise Linux 8 update for librabbitmq
• Red Hat Enterprise Linux 10 update for librabbitmq