{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/amqp-client--5.33.0/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"id":"CVE-2026-69220"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["amqp-client (\u003c= 5.33.0)"],"_cs_severities":["medium"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["VMware"],"content_html":"\u003cp\u003eThe RabbitMQ Java client (com.rabbitmq:amqp-client) is vulnerable to a denial-of-service attack due to improper input validation in its \u003ccode\u003eValueReader\u003c/code\u003e class. Specifically, the methods \u003ccode\u003ereadTable()\u003c/code\u003e and \u003ccode\u003ereadArray()\u003c/code\u003e recursively invoke \u003ccode\u003ereadFieldValue()\u003c/code\u003e without enforcing any depth constraints. An attacker controlling an AMQP server, or performing a Man-in-the-Middle (MitM) attack, can exploit this by crafting an AMQP frame containing approximately 580 levels of nested tables.\u003c/p\u003e\n\u003cp\u003eBecause the \u003ccode\u003econnection.start\u003c/code\u003e frame is processed before authentication occurs, an unauthenticated remote attacker can crash the client's I/O thread. Given the default JVM stack size, this recursion exceeds the available stack memory, triggering a \u003ccode\u003eStackOverflowError\u003c/code\u003e. This issue affects all versions of the \u003ccode\u003eamqp-client\u003c/code\u003e library up to and including 5.33.0. Defenders should prioritize patching to a version incorporating depth-limited parsing logic.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation results in an immediate denial-of-service condition for the affected client application. By forcing a \u003ccode\u003eStackOverflowError\u003c/code\u003e on the primary I/O thread, the attacker effectively disconnects the client from the broker and prevents further communication, requiring a restart of the client process to restore connectivity. This vulnerability impacts any service utilizing the affected Java client library to connect to RabbitMQ brokers.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade the \u003ccode\u003ecom.rabbitmq:amqp-client\u003c/code\u003e dependency to a version that implements depth-limiting in the \u003ccode\u003eValueReader\u003c/code\u003e component to remediate CVE-2026-69220.\u003c/li\u003e\n\u003cli\u003eIn environments where immediate patching is not possible, implement network-level egress filtering or intrusion detection to block unauthorized AMQP connections to internal services.\u003c/li\u003e\n\u003cli\u003eMonitor application logs for unexpected I/O thread crashes and \u003ccode\u003eStackOverflowError\u003c/code\u003e exceptions associated with AMQP connection initialization.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-08-18T20:59:54Z","date_published":"2026-08-18T20:59:54Z","id":"https://feed.craftedsignal.io/briefs/2026-08-rabbitmq-java-dos/","summary":"The RabbitMQ Java client (amqp-client) contains a pre-authentication vulnerability allowing remote attackers to trigger a StackOverflowError by sending deeply nested AMQP table structures.","title":"Denial of Service via Uncontrolled Recursion in RabbitMQ Java Client","url":"https://feed.craftedsignal.io/briefs/2026-08-rabbitmq-java-dos/"}],"language":"en","title":"CraftedSignal Threat Feed - Amqp-Client (\u003c= 5.33.0)","version":"https://jsonfeed.org/version/1.1"}