CVE-2015-8786

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

3.50%

Published

Dec 9, 2016

Modified

May 6, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The Management plugin in RabbitMQ before 3.6.1 allows remote authenticated users with certain privileges to cause a denial of service (resource consumption) via the (1) lengths_age or (2) lengths_incr parameter.

Weaknesses (CWE)

CWE-399

Affected Products (2)

oracle · solarisvulnerable

pivotal_software · rabbitmqvulnerable

References (18)

http://rhn.redhat.com/errata/RHSA-2017-0226.html

http://rhn.redhat.com/errata/RHSA-2017-0530.html

http://rhn.redhat.com/errata/RHSA-2017-0531.html

http://rhn.redhat.com/errata/RHSA-2017-0532.html

http://rhn.redhat.com/errata/RHSA-2017-0533.html

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

PatchThird Party Advisory

http://www.securityfocus.com/bid/91508

Third Party AdvisoryVDB Entry

https://github.com/rabbitmq/rabbitmq-management/issues/97

Issue TrackingPatch

https://github.com/rabbitmq/rabbitmq-server/releases/tag/rabbitmq_v3_6_1

Issue TrackingPatch

http://rhn.redhat.com/errata/RHSA-2017-0226.html

http://rhn.redhat.com/errata/RHSA-2017-0530.html

http://rhn.redhat.com/errata/RHSA-2017-0531.html

http://rhn.redhat.com/errata/RHSA-2017-0532.html

http://rhn.redhat.com/errata/RHSA-2017-0533.html

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

PatchThird Party Advisory

http://www.securityfocus.com/bid/91508

Third Party AdvisoryVDB Entry

https://github.com/rabbitmq/rabbitmq-management/issues/97

Issue TrackingPatch

https://github.com/rabbitmq/rabbitmq-server/releases/tag/rabbitmq_v3_6_1

Issue TrackingPatch

KEV Catalog EPSS Scores Vendors All CVEs