There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with
    RabbitMQ nodes. Prior to 5.33.1, src/main/java/com/rabbitmq/client/impl/ValueReader.java uses
    ValueReader.readBytes to accept a wire-declared contentLength below Integer.MAX_VALUE and allocate a byte
    array before checking the bytes available in the frame. A malicious AMQP peer can send a LongString or
    byte-array field with type tag S and a declared length such as 0x7FFFFFFE during the pre-authentication
    connection.start server-properties table, causing an approximately 2 GB allocation and OutOfMemoryError
    before readFully consumes data. The resulting memory exhaustion can terminate the JVM and cause denial of
    service. This issue is fixed in version 5.33.1. (CVE-2026-69219)

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - RabbitMQ Java 用戶端程式庫可讓 Java 及 JVM 型應用程式連線至 RabbitMQ 節點並與之互動。在 5.33.1之前，src/main/java/com/rabbitmq/client/impl/ValueReader.java 使用 ValueReader.readBytes 接受低於 Integer.MAX_VALUE 的連線宣告 contentLength，並在檢查框架中可用的位元組之前配置一個位元組陣列。惡意 AMQP 對等可在預先驗證 connection.start server-properties 資料表期間傳送類型標籤 S 和宣告長度 （例如 0x7FFFFFFE） 的 LongString 或位元組陣列欄位，造成大約 2 GB 的配置，並在 readFully 耗用資料之前造成 OutOfMemoryError。產生的記憶體耗盡可能會終止 JVM 並造成拒絕服務。5.33.1 版已修正此問題。(CVE-2026-69219)

請注意，Nessus 依賴供應商報告的套件存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - RabbitMQ Java 客户端库允许基于 Java 和 JVM 的应用程序连接到 RabbitMQ 节点并与之交互。在低于此版本 5.33.1的 src/main/java/com/rabbitmq/client/impl/ValueReader.java 使用 ValueReader.readBytes 接受低于 Integer.MAX_VALUE 的有线声明的 contentLength，并在检查帧中可用的字节之前分配一个字节数组。恶意的 AMQP 对等机可在 pre-authentication connection.start server-properties 表期间发送带有类型标签 S 和声明长度（例如 0x7FFFFFFE）的 LongString 或字节数组字段，从而在 readFully 消耗数据之前造成大约 2 GB 的分配和 OutOfMemoryError。由此产生的内存耗尽可终止 JVM 并导致拒绝服务。此问题已在 5.33.1 版本中修复。(CVE-2026-69219)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - RabbitMQ Java クライアント・ライブラリを使用すると、Java および JVM ベースのアプリケーションを RabbitMQ ノードに接続して対話できます。5.33.1より前は、src/main/java/com/rabbitmq/client/impl/ValueReader.java は ValueReader.readBytes を使用して Integer.MAX_VALUE より下のワイヤ宣言された contentLength を受け入れ、フレームで使用可能なバイトをチェックする前にバイト配列を割り当てます。悪意のある AMQP ピアが、事前認証の connection.start server-properties テーブル中に、タイプタグ S および 0x7FFFFFFE などの宣言された長さを持つ LongString またはバイト配列フィールドを送信し、readFully がデータを消費する前に、約 2 GB の割り当てと OutOfMemoryError を引き起こす可能性があります。結果として生じるメモリ消費により、JVM が終了し、サービス拒否を引き起こす可能性があります。この問題はバージョン 5.33.1 で修正されています。(CVE-2026-69219)

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142336 advisory.

    The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with     RabbitMQ nodes. Prior to 5.33.1, src/main/java/com/rabbitmq/client/impl/ValueReader.java uses     ValueReader.readBytes to accept a wire-declared contentLength below Integer.MAX_VALUE and allocate a byte     array before checking the bytes available in the frame. A malicious AMQP peer can send a LongString or     byte-array field with type tag S and a declared length such as 0x7FFFFFFE during the pre-authentication     connection.start server-properties table, causing an approximately 2 GB allocation and OutOfMemoryError     before readFully consumes data. The resulting memory exhaustion can terminate the JVM and cause denial of     service. This issue is fixed in version 5.33.1.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with     RabbitMQ nodes. Prior to 5.33.1, src/main/java/com/rabbitmq/client/impl/ValueReader.java uses     ValueReader.readBytes to accept a wire-declared contentLength below Integer.MAX_VALUE and allocate a byte     array before checking the bytes available in the frame. A malicious AMQP peer can send a LongString or     byte-array field with type tag S and a declared length such as 0x7FFFFFFE during the pre-authentication     connection.start server-properties table, causing an approximately 2 GB allocation and OutOfMemoryError     before readFully consumes data. The resulting memory exhaustion can terminate the JVM and cause denial of     service. This issue is fixed in version 5.33.1. (CVE-2026-69219)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
446050	SCA: security update for com.rabbitmq:amqp-client (GHSA-68mj-5wr7-6fgg)	Tenable Cloud Security	SCA Checks	2026/8/18	2026/9/3	high
446050	SCA: security update for com.rabbitmq:amqp-client (GHSA-68mj-5wr7-6fgg)	Tenable Self-Hosted Container Security	SCA Checks	2026/8/18	2026/9/3	high
459257	Echo: com.rabbitmq:amqp-client: security update to 5.33.1	Tenable Self-Hosted Container Security	Echo Local Security Checks	2026/10/2	2026/10/5	high
459257	Echo: com.rabbitmq:amqp-client: security update to 5.33.1	Tenable Cloud Security	Echo Local Security Checks	2026/10/2	2026/10/5	high
338044	Linux Distros 未修補弱點：CVE-2026-69219	Nessus	Misc.	2026/8/19	2026/10/31	high
338044	Linux Distros 未修补的漏洞：CVE-2026-69219	Nessus	Misc.	2026/8/19	2026/10/31	high
338044	Linux Distros のパッチ未適用の脆弱性: CVE-2026-69219	Nessus	Misc.	2026/8/19	2026/10/31	high
370117	Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: rabbitmq-java-client (UTSA-2026-142336)	Nessus	Unity Linux Local Security Checks	2026/10/21	2026/10/21	high
338044	Linux Distros Unpatched Vulnerability : CVE-2026-69219	Nessus	Misc.	2026/8/19	2026/10/31	high

検出

プラグインの検索

high

high

high

high

high

high

high

high

high