A vulnerability in RabbitMQ allows an administrator with elevated privileges to trigger a denial of service by exhausting system resources through a crafted definitions import.

This is an uncontrolled resource consumption vulnerability (CWE-400) occurring within the vhost metadata import process. The system uses an unsafe function, binary_to_atom, which allows an attacker with administrator privileges to exhaust the atom table and crash the node.

Successful exploitation of this flaw results in a denial of service, rendering the messaging broker unavailable. While the CVSS score of 6.9 reflects a medium severity due to the requirement for administrative privileges, the potential for total node failure poses a significant risk to operational continuity and message delivery integrity in critical infrastructure.

Immediate Action: Upgrade RabbitMQ to version 3.13.15, 4.0.20, 4.1.11, 4.2.6, or 4.3.0 immediately to resolve the unsafe use of the atomizing function.

Proactive Monitoring: Monitor server logs for unexpected node crashes or errors related to definition file imports and review administrative activity logs for unauthorized or suspicious configuration changes.

Compensating Controls: Restrict administrative access to trusted personnel only and implement strict validation processes for any definitions files imported into the production environment.

Public Exploit Available: No

Given the potential for service disruption, organizations should prioritize updating their RabbitMQ instances to the patched versions. While the exploit requires administrative access, the ease with which a node can be crashed necessitates strict adherence to the principle of least privilege for all administrative accounts.