{"id": "REDHAT-RHSA-2013-0562.NASL", "type": "nessus", "bulletinFamily": "scanner", "title": "RHEL 6 : MRG (RHSA-2013:0562)", "description": "Updated Messaging component packages that fix multiple security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise MRG 2.3 for Red Hat Enterprise Linux 6.\n\nThe Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.\n\nRed Hat Enterprise MRG (Messaging, Realtime, and Grid) is a next-generation IT infrastructure for enterprise computing. MRG offers increased performance, reliability, interoperability, and faster computing for enterprise customers.\n\nMRG Messaging is a high-speed reliable messaging distribution for Linux based on AMQP (Advanced Message Queuing Protocol), an open protocol standard for enterprise messaging that is designed to make mission critical messaging widely available as a standard service, and to make enterprise messaging interoperable across platforms, programming languages, and vendors. MRG Messaging includes an AMQP 0-10 messaging broker; AMQP 0-10 client libraries for C++, Java JMS, and Python; as well as persistence libraries and management tools.\n\nIt was found that the Apache Qpid daemon (qpidd) treated AMQP connections with the federation_tag attribute set as a broker-to-broker connection, rather than a client-to-server connection. This resulted in the source user ID of messages not being checked. A client that can establish an AMQP connection with the broker could use this flaw to bypass intended authentication. For Condor users, if condor-aviary is installed, this flaw could be used to submit jobs that would run as any user (except root, as Condor does not run jobs as root). (CVE-2012-4446)\n\nIt was found that the AMQP type decoder in qpidd allowed arbitrary data types in certain messages. A remote attacker could use this flaw to send a message containing an excessively large amount of data, causing qpidd to allocate a large amount of memory. qpidd would then be killed by the Out of Memory killer (denial of service).\n(CVE-2012-4458)\n\nAn integer overflow flaw, leading to an out-of-bounds read, was found in the Qpid qpid::framing::Buffer::checkAvailable() function. An unauthenticated, remote attacker could send a specially crafted message to Qpid, causing it to crash. (CVE-2012-4459)\n\nThe CVE-2012-4446, CVE-2012-4458, and CVE-2012-4459 issues were discovered by Florian Weimer of the Red Hat Product Security Team.\n\nThis update also fixes several bugs and adds enhancements.\nDocumentation for these changes will be available shortly from the Technical Notes document linked to in the References section.\n\nAll users of the Messaging capabilities of Red Hat Enterprise MRG are advised to upgrade to these updated packages, which resolve these issues, and fix the bugs and add the enhancements noted in the Red Hat Enterprise MRG 2 Technical Notes. After installing the updated packages, stop the cluster by either running 'service qpidd stop' on all nodes, or 'qpid-cluster --all-stop' on any one of the cluster nodes. Once stopped, restart the cluster with 'service qpidd start' on all nodes for the update to take effect.", "published": "2014-07-22T00:00:00", "modified": "2021-01-14T00:00:00", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}, "cvss2": {}, "cvss3": {"score": null, "vector": null}, "href": "https://www.tenable.com/plugins/nessus/76655", "reporter": "This script is Copyright (C) 2014-2021 and is owned by Tenable, Inc. or an Affiliate thereof.", "references": ["http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4446", "http://www.nessus.org/u?9345c1b9", "https://access.redhat.com/security/cve/cve-2012-4446", "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4459", "https://access.redhat.com/security/cve/cve-2012-4459", "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4458", "https://access.redhat.com/errata/RHSA-2013:0562", "https://access.redhat.com/security/cve/cve-2012-4458"], "cvelist": ["CVE-2012-4446", "CVE-2012-4458", "CVE-2012-4459"], "immutableFields": [], "lastseen": "2021-08-19T12:49:00", "viewCount": 4, "enchantments": {"dependencies": {}, "score": {"value": 5.8, "vector": "NONE"}, "backreferences": {"references": [{"type": "cve", "idList": ["CVE-2012-4446", "CVE-2012-4458", "CVE-2012-4459"]}, {"type": "nessus", "idList": ["REDHAT-RHSA-2013-0561.NASL"]}, {"type": "redhat", "idList": ["RHSA-2013:0561", "RHSA-2013:0562"]}, {"type": "ubuntucve", "idList": ["UB:CVE-2012-4459"]}]}, "exploitation": null, "vulnersScore": 5.8}, "pluginID": "76655", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Red Hat Security Advisory RHSA-2013:0562. The text \n# itself is copyright (C) Red Hat, Inc.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(76655);\n script_version(\"1.14\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/14\");\n\n script_cve_id(\"CVE-2012-4446\", \"CVE-2012-4458\", \"CVE-2012-4459\");\n script_xref(name:\"RHSA\", value:\"2013:0562\");\n\n script_name(english:\"RHEL 6 : MRG (RHSA-2013:0562)\");\n script_summary(english:\"Checks the rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Red Hat host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Updated Messaging component packages that fix multiple security\nissues, several bugs, and add various enhancements are now available\nfor Red Hat Enterprise MRG 2.3 for Red Hat Enterprise Linux 6.\n\nThe Red Hat Security Response Team has rated this update as having\nmoderate security impact. Common Vulnerability Scoring System (CVSS)\nbase scores, which give detailed severity ratings, are available for\neach vulnerability from the CVE links in the References section.\n\nRed Hat Enterprise MRG (Messaging, Realtime, and Grid) is a\nnext-generation IT infrastructure for enterprise computing. MRG offers\nincreased performance, reliability, interoperability, and faster\ncomputing for enterprise customers.\n\nMRG Messaging is a high-speed reliable messaging distribution for\nLinux based on AMQP (Advanced Message Queuing Protocol), an open\nprotocol standard for enterprise messaging that is designed to make\nmission critical messaging widely available as a standard service, and\nto make enterprise messaging interoperable across platforms,\nprogramming languages, and vendors. MRG Messaging includes an AMQP\n0-10 messaging broker; AMQP 0-10 client libraries for C++, Java JMS,\nand Python; as well as persistence libraries and management tools.\n\nIt was found that the Apache Qpid daemon (qpidd) treated AMQP\nconnections with the federation_tag attribute set as a\nbroker-to-broker connection, rather than a client-to-server\nconnection. This resulted in the source user ID of messages not being\nchecked. A client that can establish an AMQP connection with the\nbroker could use this flaw to bypass intended authentication. For\nCondor users, if condor-aviary is installed, this flaw could be used\nto submit jobs that would run as any user (except root, as Condor does\nnot run jobs as root). (CVE-2012-4446)\n\nIt was found that the AMQP type decoder in qpidd allowed arbitrary\ndata types in certain messages. A remote attacker could use this flaw\nto send a message containing an excessively large amount of data,\ncausing qpidd to allocate a large amount of memory. qpidd would then\nbe killed by the Out of Memory killer (denial of service).\n(CVE-2012-4458)\n\nAn integer overflow flaw, leading to an out-of-bounds read, was found\nin the Qpid qpid::framing::Buffer::checkAvailable() function. An\nunauthenticated, remote attacker could send a specially crafted\nmessage to Qpid, causing it to crash. (CVE-2012-4459)\n\nThe CVE-2012-4446, CVE-2012-4458, and CVE-2012-4459 issues were\ndiscovered by Florian Weimer of the Red Hat Product Security Team.\n\nThis update also fixes several bugs and adds enhancements.\nDocumentation for these changes will be available shortly from the\nTechnical Notes document linked to in the References section.\n\nAll users of the Messaging capabilities of Red Hat Enterprise MRG are\nadvised to upgrade to these updated packages, which resolve these\nissues, and fix the bugs and add the enhancements noted in the Red Hat\nEnterprise MRG 2 Technical Notes. After installing the updated\npackages, stop the cluster by either running 'service qpidd stop' on\nall nodes, or 'qpid-cluster --all-stop' on any one of the cluster\nnodes. Once stopped, restart the cluster with 'service qpidd start' on\nall nodes for the update to take effect.\"\n );\n # https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_MRG/2/\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?9345c1b9\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/errata/RHSA-2013:0562\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2012-4446\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2012-4459\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2012-4458\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:cumin-messaging\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:mrg-release\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:python-qpid\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:python-qpid-qmf\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:python-saslwrapper\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:qpid-cpp-client\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:qpid-cpp-client-ssl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:qpid-cpp-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:qpid-cpp-server\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:qpid-cpp-server-ssl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:qpid-qmf\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:qpid-qmf-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:qpid-tests\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:qpid-tools\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:ruby-qpid-qmf\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:ruby-saslwrapper\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:rubygem-rake\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:rubygems\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:saslwrapper\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:saslwrapper-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:saslwrapper-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:xerces-c\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:xerces-c-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:xerces-c-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:xerces-c-doc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:xqilla\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:xqilla-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:xqilla-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:xqilla-doc\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:6\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2013/03/13\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2013/03/06\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2014/07/22\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2014-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Red Hat Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\", \"Host/cpu\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Red Hat\" >!< release) audit(AUDIT_OS_NOT, \"Red Hat\");\nos_ver = pregmatch(pattern: \"Red Hat Enterprise Linux.*release ([0-9]+(\\.[0-9]+)?)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Red Hat\");\nos_ver = os_ver[1];\nif (! preg(pattern:\"^6([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Red Hat 6.x\", \"Red Hat \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\" && \"s390\" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Red Hat\", cpu);\n\nyum_updateinfo = get_kb_item(\"Host/RedHat/yum-updateinfo\");\nif (!empty_or_null(yum_updateinfo)) \n{\n rhsa = \"RHSA-2013:0562\";\n yum_report = redhat_generate_yum_updateinfo_report(rhsa:rhsa);\n if (!empty_or_null(yum_report))\n {\n security_report_v4(\n port : 0,\n severity : SECURITY_WARNING,\n extra : yum_report \n );\n exit(0);\n }\n else\n {\n audit_message = \"affected by Red Hat security advisory \" + rhsa;\n audit(AUDIT_OS_NOT, audit_message);\n }\n}\nelse\n{\n flag = 0;\n\n if (! (rpm_exists(release:\"RHEL6\", rpm:\"mrg-release\"))) audit(AUDIT_PACKAGE_NOT_INSTALLED, \"MRG\");\n\n if (rpm_check(release:\"RHEL6\", reference:\"cumin-messaging-0.1.1-2.el6\")) flag++;\n if (rpm_check(release:\"RHEL6\", reference:\"mrg-release-2.3.0-1.el6\")) flag++;\n if (rpm_check(release:\"RHEL6\", reference:\"python-qpid-0.18-4.el6\")) flag++;\n if (rpm_check(release:\"RHEL6\", cpu:\"x86_64\", reference:\"python-qpid-qmf-0.18-15.el6\")) flag++;\n if (rpm_check(release:\"RHEL6\", cpu:\"x86_64\", reference:\"python-saslwrapper-0.18-1.el6_3\")) flag++;\n if (rpm_check(release:\"RHEL6\", cpu:\"i686\", reference:\"qpid-cpp-client-0.18-14.el6\")) flag++;\n if (rpm_check(release:\"RHEL6\", cpu:\"x86_64\", reference:\"qpid-cpp-client-0.18-14.el6\")) flag++;\n if (rpm_check(release:\"RHEL6\", cpu:\"i686\", reference:\"qpid-cpp-client-ssl-0.18-14.el6\")) flag++;\n if (rpm_check(release:\"RHEL6\", cpu:\"x86_64\", reference:\"qpid-cpp-client-ssl-0.18-14.el6\")) flag++;\n if (rpm_check(release:\"RHEL6\", cpu:\"i686\", reference:\"qpid-cpp-debuginfo-0.18-14.el6\")) flag++;\n if (rpm_check(release:\"RHEL6\", cpu:\"x86_64\", reference:\"qpid-cpp-debuginfo-0.18-14.el6\")) flag++;\n if (rpm_check(release:\"RHEL6\", cpu:\"i686\", reference:\"qpid-cpp-server-0.18-14.el6\")) flag++;\n if (rpm_check(release:\"RHEL6\", cpu:\"x86_64\", reference:\"qpid-cpp-server-0.18-14.el6\")) flag++;\n if (rpm_check(release:\"RHEL6\", cpu:\"x86_64\", reference:\"qpid-cpp-server-ssl-0.18-14.el6\")) flag++;\n if (rpm_check(release:\"RHEL6\", cpu:\"i686\", reference:\"qpid-qmf-0.18-15.el6\")) flag++;\n if (rpm_check(release:\"RHEL6\", cpu:\"x86_64\", reference:\"qpid-qmf-0.18-15.el6\")) flag++;\n if (rpm_check(release:\"RHEL6\", cpu:\"i686\", reference:\"qpid-qmf-debuginfo-0.18-15.el6\")) flag++;\n if (rpm_check(release:\"RHEL6\", cpu:\"x86_64\", reference:\"qpid-qmf-debuginfo-0.18-15.el6\")) flag++;\n if (rpm_check(release:\"RHEL6\", reference:\"qpid-tests-0.18-2.el6\")) flag++;\n if (rpm_check(release:\"RHEL6\", reference:\"qpid-tools-0.18-8.el6\")) flag++;\n if (rpm_check(release:\"RHEL6\", cpu:\"x86_64\", reference:\"ruby-qpid-qmf-0.18-15.el6\")) flag++;\n if (rpm_check(release:\"RHEL6\", cpu:\"x86_64\", reference:\"ruby-saslwrapper-0.18-1.el6_3\")) flag++;\n if (rpm_check(release:\"RHEL6\", reference:\"rubygem-rake-0.8.7-2.1.el6\")) flag++;\n if (rpm_exists(rpm:\"rubygems-1.8\", release:\"RHEL6\") && rpm_check(release:\"RHEL6\", reference:\"rubygems-1.8.16-1.el6\")) flag++;\n if (rpm_check(release:\"RHEL6\", cpu:\"i686\", reference:\"saslwrapper-0.18-1.el6_3\")) flag++;\n if (rpm_check(release:\"RHEL6\", cpu:\"x86_64\", reference:\"saslwrapper-0.18-1.el6_3\")) flag++;\n if (rpm_check(release:\"RHEL6\", cpu:\"i686\", reference:\"saslwrapper-debuginfo-0.18-1.el6_3\")) flag++;\n if (rpm_check(release:\"RHEL6\", cpu:\"x86_64\", reference:\"saslwrapper-debuginfo-0.18-1.el6_3\")) flag++;\n if (rpm_check(release:\"RHEL6\", cpu:\"i686\", reference:\"saslwrapper-devel-0.18-1.el6_3\")) flag++;\n if (rpm_check(release:\"RHEL6\", cpu:\"x86_64\", reference:\"saslwrapper-devel-0.18-1.el6_3\")) flag++;\n if (rpm_check(release:\"RHEL6\", cpu:\"x86_64\", reference:\"xerces-c-3.0.1-20.el6\")) flag++;\n if (rpm_check(release:\"RHEL6\", cpu:\"x86_64\", reference:\"xerces-c-debuginfo-3.0.1-20.el6\")) flag++;\n if (rpm_check(release:\"RHEL6\", cpu:\"x86_64\", reference:\"xerces-c-devel-3.0.1-20.el6\")) flag++;\n if (rpm_check(release:\"RHEL6\", reference:\"xerces-c-doc-3.0.1-20.el6\")) flag++;\n if (rpm_check(release:\"RHEL6\", cpu:\"x86_64\", reference:\"xqilla-2.2.3-8.el6\")) flag++;\n if (rpm_check(release:\"RHEL6\", cpu:\"x86_64\", reference:\"xqilla-debuginfo-2.2.3-8.el6\")) flag++;\n if (rpm_check(release:\"RHEL6\", cpu:\"x86_64\", reference:\"xqilla-devel-2.2.3-8.el6\")) flag++;\n if (rpm_check(release:\"RHEL6\", reference:\"xqilla-doc-2.2.3-8.el6\")) flag++;\n\n if (flag)\n {\n security_report_v4(\n port : 0,\n severity : SECURITY_WARNING,\n extra : rpm_report_get() + redhat_report_package_caveat()\n );\n exit(0);\n }\n else\n {\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"cumin-messaging / mrg-release / python-qpid / python-qpid-qmf / etc\");\n }\n}\n", "naslFamily": "Red Hat Local Security Checks", "cpe": ["p-cpe:/a:redhat:enterprise_linux:cumin-messaging", "p-cpe:/a:redhat:enterprise_linux:mrg-release", "p-cpe:/a:redhat:enterprise_linux:python-qpid", "p-cpe:/a:redhat:enterprise_linux:python-qpid-qmf", "p-cpe:/a:redhat:enterprise_linux:python-saslwrapper", "p-cpe:/a:redhat:enterprise_linux:qpid-cpp-client", "p-cpe:/a:redhat:enterprise_linux:qpid-cpp-client-ssl", "p-cpe:/a:redhat:enterprise_linux:qpid-cpp-debuginfo", "p-cpe:/a:redhat:enterprise_linux:qpid-cpp-server", "p-cpe:/a:redhat:enterprise_linux:qpid-cpp-server-ssl", "p-cpe:/a:redhat:enterprise_linux:qpid-qmf", "p-cpe:/a:redhat:enterprise_linux:qpid-qmf-debuginfo", "p-cpe:/a:redhat:enterprise_linux:qpid-tests", "p-cpe:/a:redhat:enterprise_linux:qpid-tools", "p-cpe:/a:redhat:enterprise_linux:ruby-qpid-qmf", "p-cpe:/a:redhat:enterprise_linux:ruby-saslwrapper", "p-cpe:/a:redhat:enterprise_linux:rubygem-rake", "p-cpe:/a:redhat:enterprise_linux:rubygems", "p-cpe:/a:redhat:enterprise_linux:saslwrapper", "p-cpe:/a:redhat:enterprise_linux:saslwrapper-debuginfo", "p-cpe:/a:redhat:enterprise_linux:saslwrapper-devel", "p-cpe:/a:redhat:enterprise_linux:xerces-c", "p-cpe:/a:redhat:enterprise_linux:xerces-c-debuginfo", "p-cpe:/a:redhat:enterprise_linux:xerces-c-devel", "p-cpe:/a:redhat:enterprise_linux:xerces-c-doc", "p-cpe:/a:redhat:enterprise_linux:xqilla", "p-cpe:/a:redhat:enterprise_linux:xqilla-debuginfo", "p-cpe:/a:redhat:enterprise_linux:xqilla-devel", "p-cpe:/a:redhat:enterprise_linux:xqilla-doc", "cpe:/o:redhat:enterprise_linux:6"], "solution": "Update the affected packages.", "nessusSeverity": "Medium", "cvssScoreSource": "", "vpr": {"risk factor": "Medium", "score": "5.8"}, "exploitAvailable": false, "exploitEase": "", "patchPublicationDate": "2013-03-06T00:00:00", "vulnerabilityPublicationDate": "2013-03-13T00:00:00", "exploitableWith": [], "_state": {"dependencies": 1645308936}}

{"redhat": [{"lastseen": "2021-10-21T04:44:22", "description": "Red Hat Enterprise MRG (Messaging, Realtime, and Grid) is a next-generation\nIT infrastructure for enterprise computing. MRG offers increased\nperformance, reliability, interoperability, and faster computing for\nenterprise customers.\n\nMRG Messaging is a high-speed reliable messaging distribution for Linux\nbased on AMQP (Advanced Message Queuing Protocol), an open protocol\nstandard for enterprise messaging that is designed to make mission critical\nmessaging widely available as a standard service, and to make enterprise\nmessaging interoperable across platforms, programming languages, and\nvendors. MRG Messaging includes an AMQP 0-10 messaging broker; AMQP 0-10\nclient libraries for C++, Java JMS, and Python; as well as persistence\nlibraries and management tools.\n\nIt was found that the Apache Qpid daemon (qpidd) treated AMQP connections\nwith the federation_tag attribute set as a broker-to-broker connection,\nrather than a client-to-server connection. This resulted in the source user\nID of messages not being checked. A client that can establish an AMQP\nconnection with the broker could use this flaw to bypass intended\nauthentication. For Condor users, if condor-aviary is installed, this flaw\ncould be used to submit jobs that would run as any user (except root, as\nCondor does not run jobs as root). (CVE-2012-4446)\n\nIt was found that the AMQP type decoder in qpidd allowed arbitrary data\ntypes in certain messages. A remote attacker could use this flaw to send a\nmessage containing an excessively large amount of data, causing qpidd to\nallocate a large amount of memory. qpidd would then be killed by the Out of\nMemory killer (denial of service). (CVE-2012-4458)\n\nAn integer overflow flaw, leading to an out-of-bounds read, was found in\nthe Qpid qpid::framing::Buffer::checkAvailable() function. An\nunauthenticated, remote attacker could send a specially-crafted message to\nQpid, causing it to crash. (CVE-2012-4459)\n\nThe CVE-2012-4446, CVE-2012-4458, and CVE-2012-4459 issues were discovered\nby Florian Weimer of the Red Hat Product Security Team.\n\nThis update also fixes several bugs and adds enhancements. Documentation\nfor these changes will be available shortly from the Technical Notes\ndocument linked to in the References section.\n\nAll users of the Messaging capabilities of Red Hat Enterprise MRG are\nadvised to upgrade to these updated packages, which resolve these issues,\nand fix the bugs and add the enhancements noted in the Red Hat Enterprise\nMRG 2 Technical Notes. After installing the updated packages, stop the\ncluster by either running \"service qpidd stop\" on all nodes, or\n\"qpid-cluster --all-stop\" on any one of the cluster nodes. Once stopped,\nrestart the cluster with \"service qpidd start\" on all nodes for the update\nto take effect.\n", "cvss3": {}, "published": "2013-03-06T00:00:00", "type": "redhat", "title": "(RHSA-2013:0561) Moderate: Red Hat Enterprise MRG Messaging 2.3 security update", "bulletinFamily": "unix", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 6.8, "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.4, "obtainUserPrivilege": false}, "cvelist": ["CVE-2012-4446", "CVE-2012-4458", "CVE-2012-4459"], "modified": "2016-04-04T14:34:07", "id": "RHSA-2013:0561", "href": "https://access.redhat.com/errata/RHSA-2013:0561", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2021-10-19T20:37:02", "description": "Red Hat Enterprise MRG (Messaging, Realtime, and Grid) is a next-generation\nIT infrastructure for enterprise computing. MRG offers increased\nperformance, reliability, interoperability, and faster computing for\nenterprise customers.\n\nMRG Messaging is a high-speed reliable messaging distribution for Linux\nbased on AMQP (Advanced Message Queuing Protocol), an open protocol\nstandard for enterprise messaging that is designed to make mission critical\nmessaging widely available as a standard service, and to make enterprise\nmessaging interoperable across platforms, programming languages, and\nvendors. MRG Messaging includes an AMQP 0-10 messaging broker; AMQP 0-10\nclient libraries for C++, Java JMS, and Python; as well as persistence\nlibraries and management tools.\n\nIt was found that the Apache Qpid daemon (qpidd) treated AMQP connections\nwith the federation_tag attribute set as a broker-to-broker connection,\nrather than a client-to-server connection. This resulted in the source user\nID of messages not being checked. A client that can establish an AMQP\nconnection with the broker could use this flaw to bypass intended\nauthentication. For Condor users, if condor-aviary is installed, this flaw\ncould be used to submit jobs that would run as any user (except root, as\nCondor does not run jobs as root). (CVE-2012-4446)\n\nIt was found that the AMQP type decoder in qpidd allowed arbitrary data\ntypes in certain messages. A remote attacker could use this flaw to send a\nmessage containing an excessively large amount of data, causing qpidd to\nallocate a large amount of memory. qpidd would then be killed by the Out of\nMemory killer (denial of service). (CVE-2012-4458)\n\nAn integer overflow flaw, leading to an out-of-bounds read, was found in\nthe Qpid qpid::framing::Buffer::checkAvailable() function. An\nunauthenticated, remote attacker could send a specially-crafted message to\nQpid, causing it to crash. (CVE-2012-4459)\n\nThe CVE-2012-4446, CVE-2012-4458, and CVE-2012-4459 issues were discovered\nby Florian Weimer of the Red Hat Product Security Team.\n\nThis update also fixes several bugs and adds enhancements. Documentation\nfor these changes will be available shortly from the Technical Notes\ndocument linked to in the References section.\n\nAll users of the Messaging capabilities of Red Hat Enterprise MRG are\nadvised to upgrade to these updated packages, which resolve these issues,\nand fix the bugs and add the enhancements noted in the Red Hat Enterprise\nMRG 2 Technical Notes. After installing the updated packages, stop the\ncluster by either running \"service qpidd stop\" on all nodes, or\n\"qpid-cluster --all-stop\" on any one of the cluster nodes. Once stopped,\nrestart the cluster with \"service qpidd start\" on all nodes for the update\nto take effect.\n", "cvss3": {}, "published": "2013-03-06T00:00:00", "type": "redhat", "title": "(RHSA-2013:0562) Moderate: Red Hat Enterprise MRG Messaging 2.3 security update", "bulletinFamily": "unix", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 6.8, "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.4, "obtainUserPrivilege": false}, "cvelist": ["CVE-2012-4446", "CVE-2012-4458", "CVE-2012-4459"], "modified": "2018-06-07T04:58:24", "id": "RHSA-2013:0562", "href": "https://access.redhat.com/errata/RHSA-2013:0562", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}}], "nessus": [{"lastseen": "2021-08-19T12:49:14", "description": "Updated Messaging component packages that fix multiple security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise MRG 2.3 for Red Hat Enterprise Linux 5.\n\nThe Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.\n\nRed Hat Enterprise MRG (Messaging, Realtime, and Grid) is a next-generation IT infrastructure for enterprise computing. MRG offers increased performance, reliability, interoperability, and faster computing for enterprise customers.\n\nMRG Messaging is a high-speed reliable messaging distribution for Linux based on AMQP (Advanced Message Queuing Protocol), an open protocol standard for enterprise messaging that is designed to make mission critical messaging widely available as a standard service, and to make enterprise messaging interoperable across platforms, programming languages, and vendors. MRG Messaging includes an AMQP 0-10 messaging broker; AMQP 0-10 client libraries for C++, Java JMS, and Python; as well as persistence libraries and management tools.\n\nIt was found that the Apache Qpid daemon (qpidd) treated AMQP connections with the federation_tag attribute set as a broker-to-broker connection, rather than a client-to-server connection. This resulted in the source user ID of messages not being checked. A client that can establish an AMQP connection with the broker could use this flaw to bypass intended authentication. For Condor users, if condor-aviary is installed, this flaw could be used to submit jobs that would run as any user (except root, as Condor does not run jobs as root). (CVE-2012-4446)\n\nIt was found that the AMQP type decoder in qpidd allowed arbitrary data types in certain messages. A remote attacker could use this flaw to send a message containing an excessively large amount of data, causing qpidd to allocate a large amount of memory. qpidd would then be killed by the Out of Memory killer (denial of service).\n(CVE-2012-4458)\n\nAn integer overflow flaw, leading to an out-of-bounds read, was found in the Qpid qpid::framing::Buffer::checkAvailable() function. An unauthenticated, remote attacker could send a specially crafted message to Qpid, causing it to crash. (CVE-2012-4459)\n\nThe CVE-2012-4446, CVE-2012-4458, and CVE-2012-4459 issues were discovered by Florian Weimer of the Red Hat Product Security Team.\n\nThis update also fixes several bugs and adds enhancements.\nDocumentation for these changes will be available shortly from the Technical Notes document linked to in the References section.\n\nAll users of the Messaging capabilities of Red Hat Enterprise MRG are advised to upgrade to these updated packages, which resolve these issues, and fix the bugs and add the enhancements noted in the Red Hat Enterprise MRG 2 Technical Notes. After installing the updated packages, stop the cluster by either running 'service qpidd stop' on all nodes, or 'qpid-cluster --all-stop' on any one of the cluster nodes. Once stopped, restart the cluster with 'service qpidd start' on all nodes for the update to take effect.", "cvss3": {"score": null, "vector": null}, "published": "2014-07-22T00:00:00", "type": "nessus", "title": "RHEL 5 : MRG (RHSA-2013:0561)", "bulletinFamily": "scanner", "cvss2": {}, "cvelist": ["CVE-2012-4446", "CVE-2012-4458", "CVE-2012-4459"], "modified": "2021-01-14T00:00:00", "cpe": ["p-cpe:/a:redhat:enterprise_linux:mrg-release", "cpe:/o:redhat:enterprise_linux:5"], "id": "REDHAT-RHSA-2013-0561.NASL", "href": "https://www.tenable.com/plugins/nessus/76654", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Red Hat Security Advisory RHSA-2013:0561. The text \n# itself is copyright (C) Red Hat, Inc.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(76654);\n script_version(\"1.12\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/14\");\n\n script_cve_id(\"CVE-2012-4446\", \"CVE-2012-4458\", \"CVE-2012-4459\");\n script_xref(name:\"RHSA\", value:\"2013:0561\");\n\n script_name(english:\"RHEL 5 : MRG (RHSA-2013:0561)\");\n script_summary(english:\"Checks the rpm output for the updated package\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Red Hat host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Updated Messaging component packages that fix multiple security\nissues, several bugs, and add various enhancements are now available\nfor Red Hat Enterprise MRG 2.3 for Red Hat Enterprise Linux 5.\n\nThe Red Hat Security Response Team has rated this update as having\nmoderate security impact. Common Vulnerability Scoring System (CVSS)\nbase scores, which give detailed severity ratings, are available for\neach vulnerability from the CVE links in the References section.\n\nRed Hat Enterprise MRG (Messaging, Realtime, and Grid) is a\nnext-generation IT infrastructure for enterprise computing. MRG offers\nincreased performance, reliability, interoperability, and faster\ncomputing for enterprise customers.\n\nMRG Messaging is a high-speed reliable messaging distribution for\nLinux based on AMQP (Advanced Message Queuing Protocol), an open\nprotocol standard for enterprise messaging that is designed to make\nmission critical messaging widely available as a standard service, and\nto make enterprise messaging interoperable across platforms,\nprogramming languages, and vendors. MRG Messaging includes an AMQP\n0-10 messaging broker; AMQP 0-10 client libraries for C++, Java JMS,\nand Python; as well as persistence libraries and management tools.\n\nIt was found that the Apache Qpid daemon (qpidd) treated AMQP\nconnections with the federation_tag attribute set as a\nbroker-to-broker connection, rather than a client-to-server\nconnection. This resulted in the source user ID of messages not being\nchecked. A client that can establish an AMQP connection with the\nbroker could use this flaw to bypass intended authentication. For\nCondor users, if condor-aviary is installed, this flaw could be used\nto submit jobs that would run as any user (except root, as Condor does\nnot run jobs as root). (CVE-2012-4446)\n\nIt was found that the AMQP type decoder in qpidd allowed arbitrary\ndata types in certain messages. A remote attacker could use this flaw\nto send a message containing an excessively large amount of data,\ncausing qpidd to allocate a large amount of memory. qpidd would then\nbe killed by the Out of Memory killer (denial of service).\n(CVE-2012-4458)\n\nAn integer overflow flaw, leading to an out-of-bounds read, was found\nin the Qpid qpid::framing::Buffer::checkAvailable() function. An\nunauthenticated, remote attacker could send a specially crafted\nmessage to Qpid, causing it to crash. (CVE-2012-4459)\n\nThe CVE-2012-4446, CVE-2012-4458, and CVE-2012-4459 issues were\ndiscovered by Florian Weimer of the Red Hat Product Security Team.\n\nThis update also fixes several bugs and adds enhancements.\nDocumentation for these changes will be available shortly from the\nTechnical Notes document linked to in the References section.\n\nAll users of the Messaging capabilities of Red Hat Enterprise MRG are\nadvised to upgrade to these updated packages, which resolve these\nissues, and fix the bugs and add the enhancements noted in the Red Hat\nEnterprise MRG 2 Technical Notes. After installing the updated\npackages, stop the cluster by either running 'service qpidd stop' on\nall nodes, or 'qpid-cluster --all-stop' on any one of the cluster\nnodes. Once stopped, restart the cluster with 'service qpidd start' on\nall nodes for the update to take effect.\"\n );\n # https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_MRG/2/\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?9345c1b9\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/errata/RHSA-2013:0561\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2012-4446\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2012-4459\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2012-4458\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected mrg-release package.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:mrg-release\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:5\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2013/03/06\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2014/07/22\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2014-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Red Hat Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\", \"Host/cpu\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Red Hat\" >!< release) audit(AUDIT_OS_NOT, \"Red Hat\");\nos_ver = eregmatch(pattern: \"Red Hat Enterprise Linux.*release ([0-9]+(\\.[0-9]+)?)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Red Hat\");\nos_ver = os_ver[1];\nif (! ereg(pattern:\"^5([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Red Hat 5.x\", \"Red Hat \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\" && \"s390\" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Red Hat\", cpu);\n\nyum_updateinfo = get_kb_item(\"Host/RedHat/yum-updateinfo\");\nif (!empty_or_null(yum_updateinfo)) \n{\n rhsa = \"RHSA-2013:0561\";\n yum_report = redhat_generate_yum_updateinfo_report(rhsa:rhsa);\n if (!empty_or_null(yum_report))\n {\n security_report_v4(\n port : 0,\n severity : SECURITY_WARNING,\n extra : yum_report \n );\n exit(0);\n }\n else\n {\n audit_message = \"affected by Red Hat security advisory \" + rhsa;\n audit(AUDIT_OS_NOT, audit_message);\n }\n}\nelse\n{\n flag = 0;\n\n if (! (rpm_exists(release:\"RHEL5\", rpm:\"mrg-release\"))) audit(AUDIT_PACKAGE_NOT_INSTALLED, \"MRG\");\n\n if (rpm_check(release:\"RHEL5\", reference:\"mrg-release-2.3.0-1.el5\")) flag++;\n\n if (flag)\n {\n security_report_v4(\n port : 0,\n severity : SECURITY_WARNING,\n extra : rpm_report_get() + redhat_report_package_caveat()\n );\n exit(0);\n }\n else\n {\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"mrg-release\");\n }\n}\n", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}}], "ubuntucve": [{"lastseen": "2021-11-22T21:53:50", "description": "The default configuration for Apache Qpid 0.20 and earlier, when the\nfederation_tag attribute is enabled, accepts AMQP connections without\nchecking the source user ID, which allows remote attackers to bypass\nauthentication and have other unspecified impact via an AMQP request.\n\n#### Notes\n\nAuthor| Note \n---|--- \n[seth-arnold](<https://launchpad.net/~seth-arnold>) | I did not find any JIRA issues or release notes about this problem\n", "cvss3": {}, "published": "2013-03-14T00:00:00", "type": "ubuntucve", "title": "CVE-2012-4446", "bulletinFamily": "info", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 6.8, "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.4, "obtainUserPrivilege": false}, "cvelist": ["CVE-2012-4446"], "modified": "2013-03-14T00:00:00", "id": "UB:CVE-2012-4446", "href": "https://ubuntu.com/security/CVE-2012-4446", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2021-11-22T21:53:50", "description": "Integer overflow in the qpid::framing::Buffer::checkAvailable function in\nApache Qpid 0.20 and earlier allows remote attackers to cause a denial of\nservice (crash) via a crafted message, which triggers an out-of-bounds\nread.", "cvss3": {}, "published": "2013-03-14T00:00:00", "type": "ubuntucve", "title": "CVE-2012-4459", "bulletinFamily": "info", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "NONE", "availabilityImpact": "PARTIAL", "integrityImpact": "NONE", "baseScore": 5.0, "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 2.9, "obtainUserPrivilege": false}, "cvelist": ["CVE-2012-4459"], "modified": "2013-03-14T00:00:00", "id": "UB:CVE-2012-4459", "href": "https://ubuntu.com/security/CVE-2012-4459", "cvss": {"score": 5.0, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P"}}, {"lastseen": "2021-11-22T21:57:30", "description": "The AMQP type decoder in Apache Qpid 0.20 and earlier allows remote\nattackers to cause a denial of service (memory consumption and server\ncrash) via a large number of zero width elements in the client-properties\nmap in a connection.start-ok message.", "cvss3": {}, "published": "2013-03-14T00:00:00", "type": "ubuntucve", "title": "CVE-2012-4458", "bulletinFamily": "info", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "NONE", "availabilityImpact": "PARTIAL", "integrityImpact": "NONE", "baseScore": 5.0, "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 2.9, "obtainUserPrivilege": false}, "cvelist": ["CVE-2012-4458"], "modified": "2013-03-14T00:00:00", "id": "UB:CVE-2012-4458", "href": "https://ubuntu.com/security/CVE-2012-4458", "cvss": {"score": 5.0, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P"}}], "cve": [{"lastseen": "2022-03-23T12:55:56", "description": "The default configuration for Apache Qpid 0.20 and earlier, when the federation_tag attribute is enabled, accepts AMQP connections without checking the source user ID, which allows remote attackers to bypass authentication and have other unspecified impact via an AMQP request.", "cvss3": {}, "published": "2013-03-14T03:10:00", "type": "cve", "title": "CVE-2012-4446", "cwe": ["CWE-287"], "bulletinFamily": "NVD", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 6.8, "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.4, "obtainUserPrivilege": false}, "cvelist": ["CVE-2012-4446"], "modified": "2013-03-19T04:00:00", "cpe": ["cpe:/a:apache:qpid:0.7", "cpe:/a:apache:qpid:0.6", "cpe:/a:apache:qpid:0.14", "cpe:/a:apache:qpid:0.17", "cpe:/a:apache:qpid:0.10", "cpe:/a:apache:qpid:0.15", "cpe:/a:apache:qpid:0.20", "cpe:/a:apache:qpid:0.18", "cpe:/a:apache:qpid:0.12", "cpe:/a:apache:qpid:0.5", "cpe:/a:apache:qpid:0.19", "cpe:/a:apache:qpid:0.16", "cpe:/a:apache:qpid:0.9", "cpe:/a:apache:qpid:0.8", "cpe:/a:apache:qpid:0.13", "cpe:/a:apache:qpid:0.11"], "id": "CVE-2012-4446", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-4446", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}, "cpe23": ["cpe:2.3:a:apache:qpid:0.15:*:*:*:*:*:*:*", "cpe:2.3:a:apache:qpid:0.12:*:*:*:*:*:*:*", "cpe:2.3:a:apache:qpid:0.13:*:*:*:*:*:*:*", "cpe:2.3:a:apache:qpid:0.18:*:*:*:*:*:*:*", "cpe:2.3:a:apache:qpid:0.16:*:*:*:*:*:*:*", "cpe:2.3:a:apache:qpid:0.11:*:*:*:*:*:*:*", "cpe:2.3:a:apache:qpid:0.19:*:*:*:*:*:*:*", "cpe:2.3:a:apache:qpid:0.8:*:*:*:*:*:*:*", "cpe:2.3:a:apache:qpid:0.5:*:*:*:*:*:*:*", "cpe:2.3:a:apache:qpid:0.14:*:*:*:*:*:*:*", "cpe:2.3:a:apache:qpid:0.6:*:*:*:*:*:*:*", "cpe:2.3:a:apache:qpid:0.10:*:*:*:*:*:*:*", "cpe:2.3:a:apache:qpid:0.9:*:*:*:*:*:*:*", "cpe:2.3:a:apache:qpid:0.17:*:*:*:*:*:*:*", "cpe:2.3:a:apache:qpid:0.7:*:*:*:*:*:*:*", "cpe:2.3:a:apache:qpid:0.20:*:*:*:*:*:*:*"]}, {"lastseen": "2022-03-23T12:56:17", "description": "Integer overflow in the qpid::framing::Buffer::checkAvailable function in Apache Qpid 0.20 and earlier allows remote attackers to cause a denial of service (crash) via a crafted message, which triggers an out-of-bounds read.", "cvss3": {}, "published": "2013-03-14T03:10:00", "type": "cve", "title": "CVE-2012-4459", "cwe": ["CWE-189"], "bulletinFamily": "NVD", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "NONE", "availabilityImpact": "PARTIAL", "integrityImpact": "NONE", "baseScore": 5.0, "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 2.9, "obtainUserPrivilege": false}, "cvelist": ["CVE-2012-4459"], "modified": "2013-03-19T04:00:00", "cpe": ["cpe:/a:apache:qpid:0.7", "cpe:/a:apache:qpid:0.6", "cpe:/a:apache:qpid:0.14", "cpe:/a:apache:qpid:0.17", "cpe:/a:apache:qpid:0.10", "cpe:/a:apache:qpid:0.15", "cpe:/a:apache:qpid:0.20", "cpe:/a:apache:qpid:0.18", "cpe:/a:apache:qpid:0.12", "cpe:/a:apache:qpid:0.5", "cpe:/a:apache:qpid:0.19", "cpe:/a:apache:qpid:0.16", "cpe:/a:apache:qpid:0.9", "cpe:/a:apache:qpid:0.8", "cpe:/a:apache:qpid:0.13", "cpe:/a:apache:qpid:0.11"], "id": "CVE-2012-4459", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-4459", "cvss": {"score": 5.0, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P"}, "cpe23": ["cpe:2.3:a:apache:qpid:0.15:*:*:*:*:*:*:*", "cpe:2.3:a:apache:qpid:0.12:*:*:*:*:*:*:*", "cpe:2.3:a:apache:qpid:0.13:*:*:*:*:*:*:*", "cpe:2.3:a:apache:qpid:0.18:*:*:*:*:*:*:*", "cpe:2.3:a:apache:qpid:0.16:*:*:*:*:*:*:*", "cpe:2.3:a:apache:qpid:0.11:*:*:*:*:*:*:*", "cpe:2.3:a:apache:qpid:0.19:*:*:*:*:*:*:*", "cpe:2.3:a:apache:qpid:0.8:*:*:*:*:*:*:*", "cpe:2.3:a:apache:qpid:0.5:*:*:*:*:*:*:*", "cpe:2.3:a:apache:qpid:0.14:*:*:*:*:*:*:*", "cpe:2.3:a:apache:qpid:0.6:*:*:*:*:*:*:*", "cpe:2.3:a:apache:qpid:0.10:*:*:*:*:*:*:*", "cpe:2.3:a:apache:qpid:0.9:*:*:*:*:*:*:*", "cpe:2.3:a:apache:qpid:0.17:*:*:*:*:*:*:*", "cpe:2.3:a:apache:qpid:0.7:*:*:*:*:*:*:*", "cpe:2.3:a:apache:qpid:0.20:*:*:*:*:*:*:*"]}, {"lastseen": "2022-03-23T12:56:13", "description": "The AMQP type decoder in Apache Qpid 0.20 and earlier allows remote attackers to cause a denial of service (memory consumption and server crash) via a large number of zero width elements in the client-properties map in a connection.start-ok message.", "cvss3": {}, "published": "2013-03-14T03:10:00", "type": "cve", "title": "CVE-2012-4458", "cwe": ["CWE-189"], "bulletinFamily": "NVD", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "NONE", "availabilityImpact": "PARTIAL", "integrityImpact": "NONE", "baseScore": 5.0, "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 2.9, "obtainUserPrivilege": false}, "cvelist": ["CVE-2012-4458"], "modified": "2013-03-19T16:49:00", "cpe": ["cpe:/a:apache:qpid:0.7", "cpe:/a:apache:qpid:0.6", "cpe:/a:apache:qpid:0.14", "cpe:/a:apache:qpid:0.17", "cpe:/a:apache:qpid:0.10", "cpe:/a:apache:qpid:0.15", "cpe:/a:apache:qpid:0.20", "cpe:/a:apache:qpid:0.18", "cpe:/a:apache:qpid:0.12", "cpe:/a:apache:qpid:0.5", "cpe:/a:apache:qpid:0.19", "cpe:/a:apache:qpid:0.16", "cpe:/a:apache:qpid:0.9", "cpe:/a:apache:qpid:0.8", "cpe:/a:apache:qpid:0.13", "cpe:/a:apache:qpid:0.11"], "id": "CVE-2012-4458", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-4458", "cvss": {"score": 5.0, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P"}, "cpe23": ["cpe:2.3:a:apache:qpid:0.15:*:*:*:*:*:*:*", "cpe:2.3:a:apache:qpid:0.12:*:*:*:*:*:*:*", "cpe:2.3:a:apache:qpid:0.13:*:*:*:*:*:*:*", "cpe:2.3:a:apache:qpid:0.18:*:*:*:*:*:*:*", "cpe:2.3:a:apache:qpid:0.16:*:*:*:*:*:*:*", "cpe:2.3:a:apache:qpid:0.11:*:*:*:*:*:*:*", "cpe:2.3:a:apache:qpid:0.19:*:*:*:*:*:*:*", "cpe:2.3:a:apache:qpid:0.8:*:*:*:*:*:*:*", "cpe:2.3:a:apache:qpid:0.5:*:*:*:*:*:*:*", "cpe:2.3:a:apache:qpid:0.14:*:*:*:*:*:*:*", "cpe:2.3:a:apache:qpid:0.6:*:*:*:*:*:*:*", "cpe:2.3:a:apache:qpid:0.9:*:*:*:*:*:*:*", "cpe:2.3:a:apache:qpid:0.10:*:*:*:*:*:*:*", "cpe:2.3:a:apache:qpid:0.17:*:*:*:*:*:*:*", "cpe:2.3:a:apache:qpid:0.7:*:*:*:*:*:*:*", "cpe:2.3:a:apache:qpid:0.20:*:*:*:*:*:*:*"]}]}