{"id":"CVE-2023-46120","summary":"RabbitMQ Java client's lack of message size limitation leads to remote DoS attack","details":"The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. `maxBodyLebgth` was not used when receiving Message objects.  Attackers could send a very large Message causing a memory overflow and triggering an OOM Error. Users of RabbitMQ may suffer from  DoS attacks from RabbitMQ Java client which will ultimately exhaust the memory of the consumer. This vulnerability was patched in version 5.18.0.","aliases":["GHSA-mm8h-8587-p46h"],"modified":"2026-08-18T17:25:59.417281Z","published":"2023-10-24T23:05:24.172Z","related":["openSUSE-SU-2024:13750-1"],"database_specific":{"cna_assigner":"GitHub_M","cwe_ids":["CWE-400"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/46xxx/CVE-2023-46120.json"},"references":[{"type":"WEB","url":"https://github.com/rabbitmq/rabbitmq-java-client/releases/tag/v5.18.0"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/46xxx/CVE-2023-46120.json"},{"type":"ADVISORY","url":"https://github.com/rabbitmq/rabbitmq-java-client/security/advisories/GHSA-mm8h-8587-p46h"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-46120"},{"type":"REPORT","url":"https://github.com/rabbitmq/rabbitmq-java-client/issues/1062"},{"type":"FIX","url":"https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/rabbitmq/rabbitmq-java-client","events":[{"introduced":"0"},{"fixed":"dcc284ee1b199057a1094055b7eac597539c9942"},{"fixed":"714aae602dcae6cb4b53cadf009323ebac313cc8"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"fixed":"5.18.0"}],"source":["CPE_RANGE","REFERENCES"],"cpe":"cpe:2.3:a:vmware:rabbitmq_java_client:*:*:*:*:*:*:*:*"}}],"versions":["v5.17.0","v5.17.0.RC2","v5.17.0.RC1","v5.16.0","v5.16.0.RC1","v5.15.0","v5.15.0.RC1","v5.14.0","v5.14.0.RC1","v5.13.0","v5.13.0.RC2","v5.13.0.RC1","v5.12.0","v5.12.0.RC1","v5.11.0.RC1","v5.10.0","v5.10.0.RC2","v5.10.0.RC1","v5.9.0","v5.9.0.RC1","v5.8.0","v5.8.0.RC2","v5.8.0.RC1","v5.7.0","v5.7.0.RC1","v5.6.0","v5.6.0.RC1","v5.5.0","v5.5.0.RC1","v5.4.0","v5.4.0.RC3","v5.4.0.RC2","v5.4.0.RC1","v5.4.0.M1","v5.2.0","v5.2.0.RC1","v5.1.0","v5.1.0.RC1","v5.0.0","v5.0.0.RC1","rabbitmq_v3_7_0_milestone15","rabbitmq_v3_7_0_milestone14","rabbitmq_v3_7_0_milestone13","v4.1.0","v4.1.0.RC1","rabbitmq_v3_7_0_milestone12","rabbitmq_v3_7_0_milestone11","rabbitmq_v3_7_0_milestone10","rabbitmq_v3_7_0_milestone9","rabbitmq_v3_7_0_milestone8","v4.0.0","v4.0.0.RC2","rabbitmq_v3_7_0_milestone7","v4.0.0.RC1","v4.0.0.M2","v4.0.0.M1","rabbitmq_v3_7_0_milestone5","rabbitmq_v3_7_0_milestone4","rabbitmq_v3_7_0_milestone3","rabbitmq_v3_7_0_milestone2","rabbitmq_v3_7_0_milestone1","rabbitmq_v3_6_0","rabbitmq_v3_6_0_rc3","rabbitmq_v3_6_0_rc2","rabbitmq_v3_6_0_rc1","rabbitmq_v3_6_0_milestone3","rabbitmq_v3_6_0_milestone2","rabbitmq_v3_6_0_milestone1","rabbitmq_v3_5_0","rabbitmq_v3_4_4","rabbitmq_v3_4_3","rabbitmq_v3_4_2","rabbitmq_v3_4_1","rabbitmq_v2_7_0","rabbitmq_v2_4_0","rabbitmq_v1_8_1","rabbitmq_v1_8_0","rabbitmq_v1_7_2","rabbitmq_v1_7_1","rabbitmq_v1_7_0","rabbitmq_v1_6_0","rabbitmq_v1_4_0"],"database_specific":{"vanir_signatures_modified":"2026-08-18T17:25:59Z","vanir_signatures":[{"source":"https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8","target":{"file":"src/main/java/com/rabbitmq/client/ConnectionFactory.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["130518995842570652738354992219942058675","235768512400746470463056922105136583447","182062003750732002315116250312230754546","9135328589112565672063863611919595324","119708841080025768205144059254274589103","202939691671214968658618961532545774186","224884045546332667990599235792021707393","180614393696011899136483506458740927642","174116127054121005649731698213524952579","172067743892712703918649562038466686078","318513109664025920421125702464365034922","160767228388607021030673395143696797089","170039524453026618274711270705447073340","151736063782401084961316911393431063178","181254480433288871094460039820979579876","214294910019098809007369606093523910584","1765866244268871524643137444429033991","223974325191646893343560505796438218473","199962675250714799893460467700494417915"]},"id":"CVE-2023-46120-1213dda1","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"line_hashes":["185738174607601888736472602156645685370","142003036452518149118953330572481871862","156598035906075614803579721113597406985","160747156463253529756420374711342028540","94056693774843244207735773679277498905","88832218369949534439536423122342497071","194483265433905511140238732142157130694","212153872314685710055206956494661511589","332948543156085097446031210631965759708","125968223061384375397911364505684399689","184112038743191364884694563317487186487","17532880156796500123990952416015745388","145257158403261132110091857892779074702","311992605275029553515385748989526887612","243482959835811074912383136497315989422","227555765313455741477619730375739858658","112174324697509321143705753847154487873","55459245216463281437040776590872831105"],"threshold":0.9},"id":"CVE-2023-46120-13c6c7cb","signature_type":"Line","signature_version":"v1","source":"https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8","target":{"file":"src/main/java/com/rabbitmq/client/impl/CommandAssembler.java"}},{"source":"https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8","target":{"file":"src/test/java/com/rabbitmq/client/test/TestUtils.java"},"deprecated":false,"digest":{"line_hashes":["5308737882910170960433672733085676917","314034080702590502883469594815272776964","201690830560291080546039446876617381721","121387526314507247657541201624437676696","273955856274845639955491753762955220702","118583500327526325114876109353927228559","194855724843304798606315224501372988301","157241003011343061294538290270676375392","218731808220471873168904777551242662047","168359470429557079123167654481933218851","6893644043567237244529506542210703807","177565442750871892003140676414918872282","108864814949287471049586816195698973181","15886775832344860305702753098542511231","40469497645104550601198133890476727770","304625061051303958631415862155041404776"],"threshold":0.9},"id":"CVE-2023-46120-1a3e0646","signature_type":"Line","signature_version":"v1"},{"id":"CVE-2023-46120-1c8cf2c4","signature_type":"Function","signature_version":"v1","source":"https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8","target":{"file":"src/main/java/com/rabbitmq/client/impl/nio/SocketChannelFrameHandlerFactory.java","function":"SocketChannelFrameHandlerFactory"},"deprecated":false,"digest":{"function_hash":"323360218485329805330503431069899236516","length":388}},{"source":"https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8","target":{"file":"src/test/java/com/rabbitmq/client/test/FrameBuilderTest.java","function":"buildFrameInOneGo"},"deprecated":false,"digest":{"function_hash":"144123790145209621536353820883704693942","length":409},"id":"CVE-2023-46120-2cb9569b","signature_type":"Function","signature_version":"v1"},{"target":{"file":"src/main/java/com/rabbitmq/client/impl/nio/SocketChannelFrameHandlerState.java","function":"SocketChannelFrameHandlerState"},"deprecated":false,"digest":{"length":1174,"function_hash":"187652227900628908506303858331018839889"},"id":"CVE-2023-46120-34f04856","signature_type":"Function","signature_version":"v1","source":"https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8"},{"digest":{"function_hash":"305599252233589067135583162572943332860","length":201},"id":"CVE-2023-46120-3cb5c024","signature_type":"Function","signature_version":"v1","source":"https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8","target":{"file":"src/main/java/com/rabbitmq/client/impl/SocketFrameHandlerFactory.java","function":"SocketFrameHandlerFactory"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8","target":{"function":"AMQCommand","file":"src/main/java/com/rabbitmq/client/impl/AMQCommand.java"},"deprecated":false,"digest":{"function_hash":"48478382569912336814393582129788172084","length":126},"id":"CVE-2023-46120-3fd4d44a"},{"deprecated":false,"digest":{"line_hashes":["292506553734936468388352563078490456363","7107592038605338116830321771928798938","158548243400580821666204352741474200898","92713532258256788612918735814345997393","53338295590835624531609581959252397037","284403956791813253622016532797026699002","167891635843959264847399900029875286799","233463877063867928323707445811912324766","330467354138279384085408024945281073590","321097568578317156901001377626374759875","5814668016085380735671440012216867721","132478320957028603961401321179704571169","148325997387892326617407535328828504367","337738994550384960350598485589082617594","93650091777583899394392127934386357824","197314218712026769939038847644182430664","54998177475523755601038554538762764589"],"threshold":0.9},"id":"CVE-2023-46120-449e1cce","signature_type":"Line","signature_version":"v1","source":"https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8","target":{"file":"src/main/java/com/rabbitmq/client/impl/AMQChannel.java"}},{"target":{"file":"src/main/java/com/rabbitmq/client/impl/nio/SocketChannelFrameHandlerState.java"},"deprecated":false,"digest":{"line_hashes":["85449900346258107391959314728826205250","275754491308528404552877751450795224123","73918837786756527808524937162563875058","340240566801086041954831518513706024034","329421933683475404429513648659272423517","217375921517525146512050294470545946270","221266198902858277370666134126352098410","130701016007443235054170557827294236670","149134459150477580982718953389080179244","122158168959462039156495513969021873036","135728013162782487816958285983161751176","332980954088257390566424990696482909917","112638330074391676237552961452841008139"],"threshold":0.9},"id":"CVE-2023-46120-497d31cc","signature_type":"Line","signature_version":"v1","source":"https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8"},{"id":"CVE-2023-46120-500ccaba","signature_type":"Line","signature_version":"v1","source":"https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8","target":{"file":"src/main/java/com/rabbitmq/client/impl/SocketFrameHandler.java"},"deprecated":false,"digest":{"line_hashes":["250197599347533406960566252710018221346","314964030841082812158691527685542980193","241145068883225642676744360328991898899","322814349315779803543587559623160393650","202270226355814164460969306655031748363","167128984540838913621915618601853312268","268236104063791697039532845094970287045","181310798993500359824206266708058120339","186681836573556391850773505176558071876","323642276588391608337462746170124630119","132061786327306185372066851446360770206","309050576086815771238909019671266962689","219362379576787044815727879828446954709","65018725863991581477902835896721102698","164334344748001070571249780705256545182"],"threshold":0.9}},{"source":"https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8","target":{"file":"src/main/java/com/rabbitmq/client/impl/SocketFrameHandlerFactory.java"},"deprecated":false,"digest":{"line_hashes":["128471742969122252358100282470821986824","161221195988037695156802853212704525593","55094828358844211603501483266008640914","210155384812136594251451929167348782087","92678701193628377087353935235395674999","233645765682382516267915662709648436304","189891077276357850828725427106000882843","214610734855512873618973918676983112846","275648151362066860300472902380677510786","106319583660769054293039647247667085869","37519473146207769085374848179731473566","77423588392838728603515838025180430669","40999485078724987740828499904553721184"],"threshold":0.9},"id":"CVE-2023-46120-52157669","signature_type":"Line","signature_version":"v1"},{"source":"https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8","target":{"function":"SocketFrameHandler","file":"src/main/java/com/rabbitmq/client/impl/SocketFrameHandler.java"},"deprecated":false,"digest":{"function_hash":"130438997969700493744613948956211472723","length":252},"id":"CVE-2023-46120-58b8e30f","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"96932893953712850088977818176347166516","length":732},"id":"CVE-2023-46120-5e2e1853","signature_type":"Function","signature_version":"v1","source":"https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8","target":{"file":"src/test/java/com/rabbitmq/client/test/FrameBuilderTest.java","function":"buildFramesInOneGo"}},{"target":{"file":"src/main/java/com/rabbitmq/client/impl/nio/SslEngineFrameBuilder.java","function":"SslEngineFrameBuilder"},"deprecated":false,"digest":{"function_hash":"248682845021860836932963328225904999036","length":149},"id":"CVE-2023-46120-5edcf40d","signature_type":"Function","signature_version":"v1","source":"https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8","target":{"file":"src/main/java/com/rabbitmq/client/impl/nio/SocketChannelFrameHandlerFactory.java"},"deprecated":false,"digest":{"line_hashes":["130838322149108328150674838397878673044","134306903613569096281830037872954750781","124287760518453569222542485410464238388","133980660694934506353838042173788884034","213050552308777328892701929193088004509","53772564692682781835206651459763297829","19542346223203092615677577417458450774","283024570750952431739433227254158751549","62650664611084360103241326769724444986","171104303605713486196254967762141065817"],"threshold":0.9},"id":"CVE-2023-46120-66029cfe"},{"source":"https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8","target":{"file":"src/main/java/com/rabbitmq/client/impl/AMQConnection.java","function":"AMQConnection"},"deprecated":false,"digest":{"length":1548,"function_hash":"222329247711069821925077384133671111240"},"id":"CVE-2023-46120-72bad796","signature_type":"Function","signature_version":"v1"},{"digest":{"line_hashes":["73576270576588809678259227466557513827","138240438789842096597684896511945356611","333448548443190990790948903556345507826","12837257959563102041071214665131130564","294292773785413062944636755635156018986","177191308981115267047148503689430117413","44754047661069888361571939910659000707","25493605492022237604324751529054325558","188084234209968211297079705207946404570","337720940475316904133339987448650555938","164519571625690102199530503111256617757","234612546957728930575662666657271763658"],"threshold":0.9},"id":"CVE-2023-46120-7392df5a","signature_type":"Line","signature_version":"v1","source":"https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8","target":{"file":"src/main/java/com/rabbitmq/client/impl/AMQCommand.java"},"deprecated":false},{"deprecated":false,"digest":{"line_hashes":["104662957560740974808578666035403138250","312465422780776074908520866286103868789","150015872844388784354562151394531793895","335567069270917405684334045524674430632","53008923237594724824781074375912689951","8387382043233525129007159140114556923","253475218309464836941618401879997867293","158803352247661919542315390721932773806"],"threshold":0.9},"id":"CVE-2023-46120-74790773","signature_type":"Line","signature_version":"v1","source":"https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8","target":{"file":"src/main/java/com/rabbitmq/client/impl/AbstractFrameHandlerFactory.java"}},{"deprecated":false,"digest":{"line_hashes":["312326623746813796466073732243918404282","83107432755475782285254884297949750140","11581336250417159351714188659955118253","270789341276816597715240281864729113687","173731518758731252893120877954241838197","132063848751382357720984481576466314851","309035067083907415088489473890704617597","307201822441952062791062079223743922072","231061049668579203867661848654154888893","299371279192697447696994492112577595026","83132959825001351670058518847891740631","84861339630719280094150543827633381486","222024302613383095213042350612600128423","39860444431439623156106277147294040281","245678351401827420119463739442915832533","195842966842593706073764887166551377993"],"threshold":0.9},"id":"CVE-2023-46120-79514fba","signature_type":"Line","signature_version":"v1","source":"https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8","target":{"file":"src/test/java/com/rabbitmq/client/test/FrameBuilderTest.java"}},{"deprecated":false,"digest":{"line_hashes":["255257189923269537362730858384448015727","298295344823783066697746269865540837398","301581536944490246192419391706390765139","181716543647186171320561380758707738312","103744647740861693748988340327582217667","187716004260767935166433557953577837225"],"threshold":0.9},"id":"CVE-2023-46120-820b9210","signature_type":"Line","signature_version":"v1","source":"https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8","target":{"file":"src/main/java/com/rabbitmq/client/impl/ConnectionParams.java"}},{"deprecated":false,"digest":{"function_hash":"222244271338740394753535371424069686878","length":312},"id":"CVE-2023-46120-827bf617","signature_type":"Function","signature_version":"v1","source":"https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8","target":{"file":"src/main/java/com/rabbitmq/client/impl/CommandAssembler.java","function":"consumeHeaderFrame"}},{"id":"CVE-2023-46120-845cc851","signature_type":"Function","signature_version":"v1","source":"https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8","target":{"file":"src/main/java/com/rabbitmq/client/impl/nio/SocketChannelFrameHandlerFactory.java","function":"create"},"deprecated":false,"digest":{"function_hash":"248210858573903836350527063490688787141","length":1959}},{"id":"CVE-2023-46120-8b8fbbd6","signature_type":"Function","signature_version":"v1","source":"https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8","target":{"file":"src/main/java/com/rabbitmq/client/impl/SocketFrameHandler.java","function":"readFrame"},"deprecated":false,"digest":{"length":118,"function_hash":"258058651251131482636200101947702317500"}},{"signature_version":"v1","source":"https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8","target":{"file":"src/main/java/com/rabbitmq/client/impl/nio/FrameBuilder.java","function":"readFrame"},"deprecated":false,"digest":{"function_hash":"303511830459628003982605771469428732874","length":1248},"id":"CVE-2023-46120-987d698c","signature_type":"Function"},{"signature_version":"v1","source":"https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8","target":{"file":"src/main/java/com/rabbitmq/client/impl/AMQConnection.java"},"deprecated":false,"digest":{"line_hashes":["256904198408085027789700360140653731766","109393292060014416677052123862965006966","202051829573121421985266174649860931351","206385439610057466384636317141325664546","181248270685752537496174494506243749448","337751065334116868919569819863579912745","152878428638427469903188881369738305080","34272896020509364069164581325290537371","167356188253979259861513718552734023910","90971516406082139511249581667069419311","207120686117943908884335326932463193843","81207269061272268637557202127654566846","234548534077313475075854083996894356256"],"threshold":0.9},"id":"CVE-2023-46120-9a713be8","signature_type":"Line"},{"id":"CVE-2023-46120-a1f9f02e","signature_type":"Function","signature_version":"v1","source":"https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8","target":{"file":"src/main/java/com/rabbitmq/client/ConnectionFactory.java","function":"params"},"deprecated":false,"digest":{"function_hash":"122230468043342786314473302020000844091","length":1216}},{"source":"https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8","target":{"file":"src/main/java/com/rabbitmq/client/impl/AMQCommand.java","function":"AMQCommand"},"deprecated":false,"digest":{"function_hash":"137805300929101099424709363870784524143","length":46},"id":"CVE-2023-46120-b50b1b9d","signature_type":"Function","signature_version":"v1"},{"digest":{"function_hash":"50186938414228539590406689249570950797","length":158},"id":"CVE-2023-46120-b6633c2b","signature_type":"Function","signature_version":"v1","source":"https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8","target":{"function":"handleFrame","file":"src/main/java/com/rabbitmq/client/impl/AMQChannel.java"},"deprecated":false},{"signature_version":"v1","source":"https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8","target":{"file":"src/main/java/com/rabbitmq/client/impl/SocketFrameHandlerFactory.java","function":"SocketFrameHandlerFactory"},"deprecated":false,"digest":{"function_hash":"300893615115528311812607259563729828093","length":140},"id":"CVE-2023-46120-b7bf189b","signature_type":"Function"},{"id":"CVE-2023-46120-ba8e4c3b","signature_type":"Function","signature_version":"v1","source":"https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8","target":{"file":"src/main/java/com/rabbitmq/client/impl/nio/FrameBuilder.java","function":"FrameBuilder"},"deprecated":false,"digest":{"function_hash":"198207514292419398494959738629231135784","length":100}},{"source":"https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8","target":{"file":"src/main/java/com/rabbitmq/client/impl/SocketFrameHandlerFactory.java","function":"create"},"deprecated":false,"digest":{"function_hash":"317465661961417811549698021804231999524","length":111},"id":"CVE-2023-46120-bdcd20e2","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"line_hashes":["199376313420356813546172988969084082332","91395476648003173746778411353966953289","261960122279615876406725533521151963374","63089973400667239874568982976881178187","265772093568897905157471037038538490735","269693008382332594994600361982972215002","150808186862726177382180160912695055482","35616228746015703053100875666396476977","339712996911994543552004566051957197754","308614067976142601570362919430524534470","144097030649198811601686885986963927064","274435680657438984812280943898704301874","152744813078082015431000640423246141724","168874046467746236527903295809485786627","103342906904948735197437154861622530770","248804084771421454258136709608137144560","150329879466294066672375420572996346741","324024254817755175081605973328839105483","233514090645647202074615447195880665770","245249179232221624030240147012539262747"],"threshold":0.9},"id":"CVE-2023-46120-bdda4132","signature_type":"Line","signature_version":"v1","source":"https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8","target":{"file":"src/main/java/com/rabbitmq/client/impl/nio/FrameBuilder.java"}},{"target":{"file":"src/test/java/com/rabbitmq/client/test/FrameBuilderTest.java","function":"buildFrameInSeveralCalls"},"deprecated":false,"digest":{"function_hash":"205299984238298357858690212878891170055","length":570},"id":"CVE-2023-46120-c59e400f","signature_type":"Function","signature_version":"v1","source":"https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8","target":{"file":"src/main/java/com/rabbitmq/client/impl/Frame.java"},"deprecated":false,"digest":{"line_hashes":["37506172778485322219266165498804976418","99876962501066551499066695133814180312","134405913265189302939467564972896645127","65012919133385714965867213837589844035","102961441989383393674830311886662314195","206417342816214034625455586129656166795","18501777297747175577784395100884116461","52046717781417495102202154673795768398","197170379482293324129197729603441946365","121693867809864950891806085815700080147","51649891457267571025949511807818002848","339703507328664904643167719119723533625","95030938372981687214805037025361315354"],"threshold":0.9},"id":"CVE-2023-46120-c9dbb6e5"},{"target":{"function":"createFrameHandlerFactory","file":"src/main/java/com/rabbitmq/client/ConnectionFactory.java"},"deprecated":false,"digest":{"function_hash":"204573829005351013148556183259365485881","length":535},"id":"CVE-2023-46120-cfce0e5c","signature_type":"Function","signature_version":"v1","source":"https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8","target":{"file":"src/main/java/com/rabbitmq/client/impl/Frame.java","function":"readFrom"},"deprecated":false,"digest":{"function_hash":"239963615497413851711687725405617997513","length":503},"id":"CVE-2023-46120-d2589e03"},{"source":"https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8","target":{"file":"src/test/java/com/rabbitmq/client/test/FrameBuilderTest.java","function":"protocolMismatchHeader"},"deprecated":false,"digest":{"function_hash":"139414033396989903972205295773915706641","length":1399},"id":"CVE-2023-46120-dddc2bd0","signature_type":"Function","signature_version":"v1"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8","target":{"file":"src/main/java/com/rabbitmq/client/impl/SocketFrameHandler.java","function":"SocketFrameHandler"},"deprecated":false,"digest":{"function_hash":"195837290326181743951508858652644930296","length":71},"id":"CVE-2023-46120-e61accdd"},{"source":"https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8","target":{"file":"src/main/java/com/rabbitmq/client/impl/AMQChannel.java","function":"AMQChannel"},"deprecated":false,"digest":{"function_hash":"222492852426030931563247415955234089054","length":369},"id":"CVE-2023-46120-e75439eb","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8","target":{"file":"src/main/java/com/rabbitmq/client/impl/CommandAssembler.java","function":"CommandAssembler"},"deprecated":false,"digest":{"function_hash":"135784434424084194077805203625642901343","length":516},"id":"CVE-2023-46120-f219cbc4","signature_type":"Function"},{"signature_version":"v1","source":"https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8","target":{"file":"src/main/java/com/rabbitmq/client/impl/nio/SslEngineFrameBuilder.java"},"deprecated":false,"digest":{"line_hashes":["276478969536757434069857239505448964908","44634588997750868689284552076252221893","177526035997505306335036064810921982450","259044820119753209442258514720619503987","153588265012436469111573839742070363719","152250501017720729047875391933256526594"],"threshold":0.9},"id":"CVE-2023-46120-f9090131","signature_type":"Line"},{"id":"CVE-2023-46120-fa06ab8c","signature_type":"Function","signature_version":"v1","source":"https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8","target":{"function":"AbstractFrameHandlerFactory","file":"src/main/java/com/rabbitmq/client/impl/AbstractFrameHandlerFactory.java"},"deprecated":false,"digest":{"function_hash":"276849226725221505050513190310608889350","length":125}},{"signature_version":"v1","source":"https://github.com/rabbitmq/rabbitmq-java-client/commit/714aae602dcae6cb4b53cadf009323ebac313cc8","target":{"file":"src/main/java/com/rabbitmq/client/impl/AMQCommand.java","function":"AMQCommand"},"deprecated":false,"digest":{"function_hash":"188206164586715878699394529292192398624","length":59},"id":"CVE-2023-46120-fce3114c","signature_type":"Function"}],"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-46120.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H"}]}