CyberRota Analysis
AI-GeneratedThe amqp091-go client prior to version 1.13.0 is vulnerable to resource allocation issues when interacting with a compromised AMQP broker, allowing the broker to exceed the negotiated frame_max limit. This can result in unexpected memory consumption and potential application-layer denial of service (DoS). Organizations using this client should prioritize upgrading to version 1.13.0 to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
amqp091-go is a Go AMQP 0.9.1 client. Before version 1.13.0, a compromised or malicious AMQP broker can force the client to allocate resources for and process content body frames that exceed the negotiated frame_max limit. This can lead to unexpected memory consumption or application-layer denial of service (DoS), bypassing the protocol's built-in framing constraints. Version 1.13.0 contains a fix. No known workarounds are available.