The rabbitmq-c project reports:
CVE-2026-61547: A heap buffer overflow exists when the
	  amqp_send_frame() API is used to serialise an oversized
	  AMQP_FRAME_BODY frame, as memcpy() writes past the end of the
	  heap allocation without validating that the body fragment
	  fits within the allocated frame buffer.
CVE-2026-59986: An integer overflow in the amqp_decode_bytes
	  bounds check on 32-bit systems allows a malicious AMQP broker
	  to craft frames with oversized BYTES fields, resulting in an
	  out-of-bounds read that may expose process memory or crash the
	  application.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 03306014-c15d-11f1-acb8-107c611e671e advisory.

    The rabbitmq-c project reports:
    CVE-2026-61547: A heap buffer overflow exists when the               amqp_send_frame() API is used to serialise an oversized               AMQP_FRAME_BODY frame, as memcpy() writes past the end of the               heap allocation without validating that the body fragment               fits within the allocated frame buffer.
    CVE-2026-59986: An integer overflow in the amqp_decode_bytes               bounds check on 32-bit systems allows a malicious AMQP broker               to craft frames with oversized BYTES fields, resulting in an               out-of-bounds read that may expose process memory or crash the               application.

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  CVE-2026-61547


The remote Ubuntu 14.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS / Pro Realtime 22.04 LTS / Pro Realtime 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8724-1 advisory.

    It was discovered that the rabbitmq-c command-line tools only accepted credentials on the command line,     making them visible to other local users through the process list. An attacker could possibly use this to     obtain sensitive credentials. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04     LTS, and Ubuntu 20.04 LTS. (CVE-2023-35789)

    It was discovered that rabbitmq-c did not correctly compute AMQP frame lengths, leading to a size_t     underflow. A remote attacker could possibly use this to cause rabbitmq-c to crash, resulting in a denial     of service, or possibly expose sensitive information. This issue only affected Ubuntu 14.04 LTS, Ubuntu     16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2026-44235)

    It was discovered that rabbitmq-c did not properly validate the frame size during the AMQP login     handshake. A remote attacker could possibly use this to cause a heap buffer overflow, resulting in a     denial of service or possibly the execution of arbitrary code. This issue only affected Ubuntu 14.04 LTS,     Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2026-44236)

    It was discovered that rabbitmq-c did not correctly validate the length of decoded bytes fields, leading     to an integer overflow in a bounds check on 32-bit systems. A remote attacker controlling a broker, or     able to intercept an unencrypted connection, could possibly use this to cause an out-of-bounds read,     resulting in a denial of service or the exposure of sensitive information. (CVE-2026-59986)

    It was discovered that rabbitmq-c did not validate the body fragment length when serialising an AMQP body     frame with the amqp_send_frame() API. An attacker could possibly use this to cause a heap buffer overflow,     resulting in a denial of service (application crash) or possibly the execution of arbitrary code. This     issue did not affect Ubuntu 14.04 LTS. (CVE-2026-61547)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4763 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-4763-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                          Abhijith PA     August 31, 2026                               https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : librabbitmq     Version        : 0.10.0-1+deb11u3 0.11.0-1+deb12u3     CVE ID         : CVE-2026-59986 CVE-2026-61547

    Two issues has been found in librabbitmq, AMQP client library and     tools written in C.

    CVE-2026-59986

        The bounds check in librabbitmq/amqp_private.h function overflows         causing out-of-bounds read on 32-bit systems which in turn causes         information disclosure or denial of service.

    CVE-2026-61547

        A heap buffer overflow exists in rabbitmq-c when the public         amqp_send_frame() API is used to serialize an oversized         AMQP_FRAME_BODY. An application that passes an oversized body         frame to amqp_send_frame() can trigger a heap out-of-bounds write,         resulting in process crash and memory corruption.

    For Debian 11 bullseye, these problems have been fixed in version     0.10.0-1+deb11u3.

    For Debian 12 bookworm, these problems have been fixed in version     0.11.0-1+deb12u3.

    We recommend that you upgrade your librabbitmq packages.

    For the detailed security status of librabbitmq please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/librabbitmq

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6447 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6447-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     August 18, 2026                       https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : librabbitmq     CVE ID         : CVE-2026-59986 CVE-2026-61547

    Two security vulnerabilities were discovered in librabbitmq, an AMQP     client library, which could result in denial of service or potentially     the execution of arbitrary code.

    For the stable distribution (trixie), these problems have been fixed in     version 0.15.0-1+deb13u2.

    We recommend that you upgrade your librabbitmq packages.

    For the detailed security status of librabbitmq please refer to its     security tracker page at:
    https://security-tracker.debian.org/tracker/librabbitmq

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
363457	FreeBSD : rabbitmq-c -- multiple vulnerabilities (03306014-c15d-11f1-acb8-107c611e671e)	Nessus	FreeBSD Local Security Checks	Local	critical
455382	Echo: librabbitmq: security update to 0.11.0-1+deb12u3	Tenable Cloud Security	Echo Local Security Checks	Local	critical
455382	Echo: librabbitmq: security update to 0.11.0-1+deb12u3	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	critical
344621	Ubuntu 14.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS / Pro Realtime 22.04 LTS / Pro Realtime 24.04 LTS : rabbitmq-c vulnerabilities (USN-8724-1)	Nessus	Ubuntu Local Security Checks	Local	medium
341669	Debian dla-4763 : amqp-tools - security update	Nessus	Debian Local Security Checks	Local	critical
337868	Debian dsa-6447 : amqp-tools - security update	Nessus	Debian Local Security Checks	Local	critical

Detections

Analytics

CVE-2026-61547

critical

Tenable Plugins

critical

critical

critical

medium

critical

critical