CVE-2026-43973: gun HTTP/1.1 response buffer has no size limit allowing server-controlled memory exhaustion
Overview
- Severity
- N/A
- Exploit Status
- Not Exploited
- Patch Tuesday
- 2026-Jun
- Released
- 2026-06-17
- Last Updated
- 2026-06-28
- EPSS Score
- 0.38% (percentile: 30.8%)
Affected Products (2)
Open Source Software
- azl3 rabbitmq-server 3.13.7-6 on Azure Linux 3.0
- azl3 rabbitmq-server 3.13.7-5 on Azure Linux 3.0
Revision History
- 2026-06-17: Information published.
- 2026-06-23: Information published.
- 2026-06-28: Information published.