Critical RabbitMQ C Library Vulnerabilities Expose Ubuntu LTS Systems
Multiple high-severity flaws in rabbitmq-c affect older Ubuntu LTS versions, potentially allowing credential exposure, denial of service, and remote code execution.
TL;DR
- rabbitmq-c command-line tools exposed credentials via process lists (CVE-2023-35789)
- AMQP frame length miscalculation leads to crashes or data leaks (CVE-2026-44235)
- Heap buffer overflow during login handshake may allow arbitrary code execution (CVE-2026-44236)
- Affects Ubuntu 14.04, 16.04, 18.04, and 20.04 LTS only
- Immediate update recommended for impacted systems
Ubuntu has disclosed multiple critical vulnerabilities in the rabbitmq-c library that could allow attackers to steal credentials, crash services, or execute arbitrary code. These issues specifically impact long-term support versions of Ubuntu through 20.04, highlighting the importance of maintaining up-to-date security patches even on stable systems.
The most serious flaw involves credential exposure through command-line argument visibility, while additional memory handling errors create denial-of-service conditions and potential remote code execution pathways. Organizations running RabbitMQ clients built with rabbitmq-c should prioritize patching these CVEs.
Authentication and Credential Risks
- Command-line tools stored passwords in plaintext process arguments, exposing them to any user able to view running processes
- Local attackers could harvest database or message queue credentials without elevated privileges
- This vulnerability affects all listed Ubuntu LTS versions but can be mitigated by updating rabbitmq-c packages
Memory Corruption and Remote Attack Surface
- Size_t underflow during AMQP frame processing allows remote attackers to trigger crashes or access adjacent memory contents
- Invalid frame size validation during login creates heap-based buffer overflow opportunities
- Successful exploitation could lead to service disruption or unauthorized system access depending on application context
- Only applications using rabbitmq-c for AMQP communication are affected, including custom messaging clients
Sources
Sources
Security email updates
One digest email when we publish new security articles (TL;DR plus links to read more). Unsubscribe anytime from the message footer. See our Privacy Policy.