CVE-2021-22116: Debian Linux

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

RabbitMQ all versions prior to 3.8.16 are prone to a denial of service vulnerability due to improper input validation in AMQP 1.0 client connection endpoint. A malicious user can exploit the vulnerability by sending malicious AMQP messages to the target RabbitMQ instance having the AMQP 1.0 plugin enabled.

Affected products

• Debian Debian Linux: version 9.0 only
• VMware Rabbitmq: before 3.8.16 (fixed in 3.8.16)

Published 2021-06-08. Last modified 2026-06-17.