CVE-2014-9494 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2014-9494 Interim 1 21 2025-11-05T05:00:16Z current 2021-05-30T13:24:47Z 2025-11-05T05:00:16Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2014-9494 RabbitMQ before 3.4.0 allows remote attackers to bypass the loopback_users restriction via a crafted X-Forwareded-For header. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Cloud 2.0 SUSE Cloud 4 SUSE Cloud 4 Dependencies SUSE Cloud 5 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP7 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP7 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP7 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE OpenStack Cloud 6 openSUSE Tumbleweed erlang-rabbitmq-client erlang-rabbitmq-client-3.13.7-160000.2.2 erlang-rabbitmq-client-3.5.4-1.4 erlang-rabbitmq-client-3.8.11-1.26 erlang-rabbitmq-client-3.8.11-150300.3.14.1 erlang-rabbitmq-client-3.8.11-3.3.3 erlang-rabbitmq-client-3.8.3-1.27 erlang-rabbitmq-client313-3.13.1-150600.13.5.3 rabbitmq-server rabbitmq-server-3.13.7-160000.2.2 rabbitmq-server-3.4.4-2.20 rabbitmq-server-3.5.4-1.4 rabbitmq-server-3.8.11-1.26 rabbitmq-server-3.8.11-150300.3.14.1 rabbitmq-server-3.8.11-3.3.3 rabbitmq-server-3.8.3-1.27 rabbitmq-server-bash-completion-3.13.7-160000.2.2 rabbitmq-server-plugins rabbitmq-server-plugins-3.13.7-160000.2.2 rabbitmq-server-plugins-3.4.4-2.20 rabbitmq-server-plugins-3.5.4-1.4 rabbitmq-server-plugins-3.8.11-1.26 rabbitmq-server-plugins-3.8.11-150300.3.14.1 rabbitmq-server-plugins-3.8.11-3.3.3 rabbitmq-server-plugins-3.8.3-1.27 rabbitmq-server-zsh-completion-3.13.7-160000.2.2 rabbitmq-server313-3.13.1-150600.13.5.3 rabbitmq-server313-bash-completion-3.13.1-150600.13.5.3 rabbitmq-server313-plugins-3.13.1-150600.13.5.3 rabbitmq-server313-zsh-completion-3.13.1-150600.13.5.3 erlang-rabbitmq-client-3.8.3-1.27 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 rabbitmq-server-3.8.3-1.27 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 rabbitmq-server-plugins-3.8.3-1.27 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 erlang-rabbitmq-client-3.8.11-1.26 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 rabbitmq-server-3.8.11-1.26 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 rabbitmq-server-plugins-3.8.11-1.26 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 erlang-rabbitmq-client-3.8.11-3.3.3 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 rabbitmq-server-3.8.11-3.3.3 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 rabbitmq-server-plugins-3.8.11-3.3.3 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 erlang-rabbitmq-client-3.8.11-150300.3.14.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 erlang-rabbitmq-client313-3.13.1-150600.13.5.3 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 rabbitmq-server-3.8.11-150300.3.14.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 rabbitmq-server-plugins-3.8.11-150300.3.14.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 rabbitmq-server313-3.13.1-150600.13.5.3 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 rabbitmq-server313-bash-completion-3.13.1-150600.13.5.3 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 rabbitmq-server313-plugins-3.13.1-150600.13.5.3 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 rabbitmq-server313-zsh-completion-3.13.1-150600.13.5.3 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 erlang-rabbitmq-client-3.13.7-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 rabbitmq-server-3.13.7-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 rabbitmq-server-bash-completion-3.13.7-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 rabbitmq-server-plugins-3.13.7-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 rabbitmq-server-zsh-completion-3.13.7-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 rabbitmq-server-3.4.4-2.20 as a component of SUSE OpenStack Cloud 6 rabbitmq-server-plugins-3.4.4-2.20 as a component of SUSE OpenStack Cloud 6 erlang-rabbitmq-client-3.5.4-1.4 as a component of openSUSE Tumbleweed rabbitmq-server-3.5.4-1.4 as a component of openSUSE Tumbleweed rabbitmq-server-plugins-3.5.4-1.4 as a component of openSUSE Tumbleweed rabbitmq-server as a component of SUSE Cloud 2.0 rabbitmq-server as a component of SUSE Cloud 4 rabbitmq-server as a component of SUSE Cloud 4 Dependencies rabbitmq-server as a component of SUSE Cloud 5 erlang-rabbitmq-client as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 rabbitmq-server as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 rabbitmq-server-plugins as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 RabbitMQ before 3.4.0 allows remote attackers to bypass the loopback_users restriction via a crafted X-Forwareded-For header. CVE-2014-9494 SUSE Linux Enterprise Module for Server Applications 15 SP2:erlang-rabbitmq-client-3.8.3-1.27 SUSE Linux Enterprise Module for Server Applications 15 SP2:rabbitmq-server-3.8.3-1.27 SUSE Linux Enterprise Module for Server Applications 15 SP2:rabbitmq-server-plugins-3.8.3-1.27 SUSE Linux Enterprise Module for Server Applications 15 SP3:erlang-rabbitmq-client-3.8.11-1.26 SUSE Linux Enterprise Module for Server Applications 15 SP3:rabbitmq-server-3.8.11-1.26 SUSE Linux Enterprise Module for Server Applications 15 SP3:rabbitmq-server-plugins-3.8.11-1.26 SUSE Linux Enterprise Module for Server Applications 15 SP4:erlang-rabbitmq-client-3.8.11-3.3.3 SUSE Linux Enterprise Module for Server Applications 15 SP4:rabbitmq-server-3.8.11-3.3.3 SUSE Linux Enterprise Module for Server Applications 15 SP4:rabbitmq-server-plugins-3.8.11-3.3.3 SUSE Linux Enterprise Module for Server Applications 15 SP7:erlang-rabbitmq-client-3.8.11-150300.3.14.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:erlang-rabbitmq-client313-3.13.1-150600.13.5.3 SUSE Linux Enterprise Module for Server Applications 15 SP7:rabbitmq-server-3.8.11-150300.3.14.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:rabbitmq-server-plugins-3.8.11-150300.3.14.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:rabbitmq-server313-3.13.1-150600.13.5.3 SUSE Linux Enterprise Module for Server Applications 15 SP7:rabbitmq-server313-bash-completion-3.13.1-150600.13.5.3 SUSE Linux Enterprise Module for Server Applications 15 SP7:rabbitmq-server313-plugins-3.13.1-150600.13.5.3 SUSE Linux Enterprise Module for Server Applications 15 SP7:rabbitmq-server313-zsh-completion-3.13.1-150600.13.5.3 SUSE Linux Enterprise Server 16.0:erlang-rabbitmq-client-3.13.7-160000.2.2 SUSE Linux Enterprise Server 16.0:rabbitmq-server-3.13.7-160000.2.2 SUSE Linux Enterprise Server 16.0:rabbitmq-server-bash-completion-3.13.7-160000.2.2 SUSE Linux Enterprise Server 16.0:rabbitmq-server-plugins-3.13.7-160000.2.2 SUSE Linux Enterprise Server 16.0:rabbitmq-server-zsh-completion-3.13.7-160000.2.2 SUSE OpenStack Cloud 6:rabbitmq-server-3.4.4-2.20 SUSE OpenStack Cloud 6:rabbitmq-server-plugins-3.4.4-2.20 openSUSE Tumbleweed:erlang-rabbitmq-client-3.5.4-1.4 openSUSE Tumbleweed:rabbitmq-server-3.5.4-1.4 openSUSE Tumbleweed:rabbitmq-server-plugins-3.5.4-1.4 SUSE Cloud 2.0:rabbitmq-server SUSE Cloud 4 Dependencies:rabbitmq-server SUSE Cloud 4:rabbitmq-server SUSE Cloud 5:rabbitmq-server SUSE Linux Enterprise Module for Server Applications 15 SP2:erlang-rabbitmq-client SUSE Linux Enterprise Module for Server Applications 15 SP2:rabbitmq-server SUSE Linux Enterprise Module for Server Applications 15 SP2:rabbitmq-server-plugins moderate 5 AV:N/AC:L/Au:N/C:N/I:P/A:N