CyberRota Analysis
AI-GeneratedThe RabbitMQ amqp091-go client prior to version 1.13.0 is vulnerable to a denial-of-service attack due to improper handling of AMQP byte-array field lengths, which can lead to a runtime panic and crash the client process. This vulnerability can be exploited by a malicious broker to disrupt service during critical operations like connection initiation or message parsing. Organizations using this client should prioritize upgrading to version 1.13.0 to mitigate the risk of service interruptions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, readField in read.go reads the length of an AMQP byte-array field with type tag x into a signed int32 and passes the value directly to make when allocating the field buffer. A malicious or compromised broker can encode a value such as 0xFFFFFFFF, which becomes -1 and causes a len out of range runtime panic. The panic escapes the network reader goroutine and terminates the client process, including during connection.start server properties or message header table parsing. This issue is fixed in version 1.13.0.