There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with
    RabbitMQ nodes. Prior to 5.33.0, the AMQP connection tuning path records the negotiated AMQP frame_max
    value, but src/main/java/com/rabbitmq/client/impl/SocketFrameHandler.java and NettyFrameHandlerFactory
    continue to validate broker-controlled frame payload lengths against maxInboundMessageBodySize because the
    negotiated limit is not applied consistently through setMaxInboundFramePayloadSize. A malicious or
    compromised broker can send a method frame larger than the negotiated frame_max during or after connection
    establishment, causing the client to allocate and decode a protocol-invalid frame instead of rejecting it
    with MalformedFrameException. The protocol violation can disrupt the affected connection and cause client-
    side denial of service. This issue is fixed in version 5.33.0. (CVE-2026-61634)

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - RabbitMQ Java 用戶端程式庫可讓 Java 及 JVM 型應用程式連線至 RabbitMQ 節點並與之互動。在之前 5.33.0，AMQP 連線調整路徑會記錄協商的 AMQP frame_max值，但 src/main/java/com/rabbitmq/client/impl/SocketFrameHandler.java 和 NettyFrameHandlerFactory 會繼續根據 maxInboundMessageBodySize 驗證代理程式控制的框架負載長度，因為協商的限制不會透過 setMaxInboundFramePayloadSize 一致地套用。惡意或遭入侵的代理程式可能會在連線建立期間或之後傳送大於交涉frame_max的方法框架，導致用戶端配置和解碼通訊協定無效的框架，而不是使用 MalformedFrameException 拒絕它。通訊協定違規可能會中斷受影響的連線，並造成用戶端拒絕服務。5.33.0 版已修正此問題。(CVE-2026-61634)

請注意，Nessus 依賴供應商報告的套件存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - RabbitMQ Java 客户端库允许基于 Java 和 JVM 的应用程序连接到 RabbitMQ 节点并与之交互。在之前 5.33.0，AMQP 连接调整路径会记录协商的 AMQP frame_max值，但 src/main/java/com/rabbitmq/client/impl/SocketFrameHandler.java 和 NettyFrameHandlerFactory 会继续针对 maxInboundMessageBodySize 验证代理控制的帧负载长度，因为协商限制未通过 setMaxInboundFramePayloadSize 一致地应用。恶意或已被破坏的代理可在建立连接期间或之后发送大于协商frame_max的方法帧，导致客户端分配和解码协议无效帧，而非通过 MalformedFrameException 将其拒绝。协议违规可中断受影响的连接，并造成客户端拒绝服务。此问题已在 5.33.0 版本中修复。(CVE-2026-61634)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - RabbitMQ Java クライアント・ライブラリを使用すると、Java および JVM ベースのアプリケーションを RabbitMQ ノードに接続して対話できます。5.33.0より前に、AMQP接続調整パスはネゴシエートされたAMQP frame_max値を記録しますが、src/main/java/com/rabbitmq/client/impl/SocketFrameHandler.javaおよびNettyFrameHandlerFactoryは、ネゴシエートされた制限がsetMaxInboundFramePayloadSizeを通じて一貫して適用されないため、ブローカー制御のフレームペイロード長をmaxInboundMessageBodySizeに対して検証し続けます。悪意のあるブローカーまたは感染したブローカーが、接続確立中または確立後にネゴシエートされたframe_maxより大きなメソッドフレームを送信する可能性があります。これにより、クライアントは、MalformedFrameException で拒否する代わりに、プロトコル無効なフレームを割り当ててデコードさせられます。プロトコル違反により、影響を受ける接続が中断され、クライアント側のサービス拒否が引き起こされる可能性があります。この問題はバージョン 5.33.0 で修正されています。(CVE-2026-61634)

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142330 advisory.

    The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with     RabbitMQ nodes. Prior to 5.33.0, the AMQP connection tuning path records the negotiated AMQP frame_max     value, but src/main/java/com/rabbitmq/client/impl/SocketFrameHandler.java and NettyFrameHandlerFactory     continue to validate broker-controlled frame payload lengths against maxInboundMessageBodySize because the     negotiated limit is not applied consistently through setMaxInboundFramePayloadSize. A malicious or     compromised broker can send a method frame larger than the negotiated frame_max during or after connection     establishment, causing the client to allocate and decode a protocol-invalid frame instead of rejecting it     with MalformedFrameException. The protocol violation can disrupt the affected connection and cause client-     side denial of service. This issue is fixed in version 5.33.0.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with     RabbitMQ nodes. Prior to 5.33.0, the AMQP connection tuning path records the negotiated AMQP frame_max     value, but src/main/java/com/rabbitmq/client/impl/SocketFrameHandler.java and NettyFrameHandlerFactory     continue to validate broker-controlled frame payload lengths against maxInboundMessageBodySize because the     negotiated limit is not applied consistently through setMaxInboundFramePayloadSize. A malicious or     compromised broker can send a method frame larger than the negotiated frame_max during or after connection     establishment, causing the client to allocate and decode a protocol-invalid frame instead of rejecting it     with MalformedFrameException. The protocol violation can disrupt the affected connection and cause client-     side denial of service. This issue is fixed in version 5.33.0. (CVE-2026-61634)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
446063	SCA: security update for com.rabbitmq:amqp-client (GHSA-5xwg-cfvj-gff5)	Tenable Cloud Security	SCA Checks	8/18/2026	8/19/2026	info
446063	SCA: security update for com.rabbitmq:amqp-client (GHSA-5xwg-cfvj-gff5)	Tenable Self-Hosted Container Security	SCA Checks	8/18/2026	8/19/2026	info
458997	Echo: com.rabbitmq:amqp-client: security update to 5.33.0	Tenable Cloud Security	Echo Local Security Checks	10/2/2026	10/5/2026	high
458997	Echo: com.rabbitmq:amqp-client: security update to 5.33.0	Tenable Self-Hosted Container Security	Echo Local Security Checks	10/2/2026	10/5/2026	high
338047	Linux Distros 未修補弱點：CVE-2026-61634	Nessus	Misc.	8/19/2026	10/31/2026	high
338047	Linux Distros 未修补的漏洞：CVE-2026-61634	Nessus	Misc.	8/19/2026	10/31/2026	high
338047	Linux Distros のパッチ未適用の脆弱性: CVE-2026-61634	Nessus	Misc.	8/19/2026	10/31/2026	high
370092	Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: rabbitmq-java-client (UTSA-2026-142330)	Nessus	Unity Linux Local Security Checks	10/21/2026	10/21/2026	high
338047	Linux Distros Unpatched Vulnerability : CVE-2026-61634	Nessus	Misc.	8/19/2026	10/31/2026	high

Detections

Analytics

Plugins Search

info

info

high

high

high

high

high

high

high