CVE-2015-8786: Medium severity oracle solaris and zettabyte file system (zfs) vulnerability
Published Dec 9, 2016
·Updated
The Management plugin in RabbitMQ before 3.6.1 allows remote authenticated users with certain privileges to cause a denial of service (resource consumption) via the (1) lengthsage or (2) lengthsincr parameter.
Affected Software
2 affected components
Oracle Solaris=11.3
Pivotal Software RabbitMQ=3.6.0
Remediation
Patch Available
Event History
Dec 9, 2016
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-8786?
CVE-2015-8786 has a medium severity rating due to its potential for denial of service.
2
How does CVE-2015-8786 impact RabbitMQ users?
CVE-2015-8786 enables authenticated users to exhaust resources and potentially cause service interruptions.
3
What versions of RabbitMQ are affected by CVE-2015-8786?
CVE-2015-8786 affects RabbitMQ versions prior to 3.6.1.
4
How do I fix CVE-2015-8786?
To fix CVE-2015-8786, upgrade RabbitMQ to version 3.6.1 or later.
5
Are there any workarounds for CVE-2015-8786?
While upgrading is the best solution for CVE-2015-8786, limiting user privileges may help mitigate the risk.