Lucene search
K

qpid-proton: reactor sends messages in clear if ssl is requested but not available

🗓️ 21 Feb 2018 14:26:10Reported by RedHatType 
redhat
 redhat
🔗 access.redhat.com👁 2 Views

Qpid Proton may use unencrypted connections for amqp over ssl when SSL is unavailable, risking man in the middle attacks.

Related
Packages
Refs
ReporterTitlePublishedViews
Family
CNVD
Apache Qpid Proton python API plaintext transfer vulnerability
26 Mar 201600:00
cnvd
CVE
CVE-2016-2166
12 Apr 201614:00
cve
Cvelist
CVE-2016-2166
12 Apr 201614:00
cvelist
Debian CVE
CVE-2016-2166
12 Apr 201614:00
debiancve
EUVD
EUVD-2018-0588
7 Oct 202500:30
euvd
Fedora
[SECURITY] Fedora 23 Update: qpid-proton-0.12.1-1.fc23
15 Apr 201607:23
fedora
Tenable Nessus
Fedora 23 : qpid-proton-0.12.1-1.fc23 (2016-e6e8436b98)
22 Apr 201600:00
nessus
Tenable Nessus
Linux Distros Unpatched Vulnerability : CVE-2016-2166
25 Aug 202500:00
nessus
Github Security Blog
Moderate severity vulnerability that affects org.apache.qpid:proton-j
16 Oct 201819:50
github
NVD
CVE-2016-2166
12 Apr 201614:59
nvd
Rows per page
OSOS VersionArchitecturePackagePackage VersionFilename
Red Hat Enterprise Linux7anysoappy0:0.11.6-17.el7SOAPpy-0:0.11.6-17.el7.noarch.rpm
Red Hat Enterprise Linux7x86_64createrepo_c0:0.7.4-1.el7satcreaterepo_c-0:0.7.4-1.el7sat.x86_64.rpm
Red Hat Enterprise Linux7x86_64createrepo_c-debuginfo0:0.7.4-1.el7satcreaterepo_c-debuginfo-0:0.7.4-1.el7sat.x86_64.rpm
Red Hat Enterprise Linux7x86_64createrepo_c-libs0:0.7.4-1.el7satcreaterepo_c-libs-0:0.7.4-1.el7sat.x86_64.rpm
Red Hat Enterprise Linux7x86_64facter1:2.4.6-3.el7satfacter-1:2.4.6-3.el7sat.x86_64.rpm
Red Hat Enterprise Linux7anyhiera0:1.3.1-2.el7sathiera-0:1.3.1-2.el7sat.noarch.rpm
Red Hat Enterprise Linux7anykobo0:0.5.1-1.el7satkobo-0:0.5.1-1.el7sat.noarch.rpm
Red Hat Enterprise Linux7x86_64libstemmer0:0-2.585svn.el7satlibstemmer-0:0-2.585svn.el7sat.x86_64.rpm
Red Hat Enterprise Linux7x86_64libstemmer-debuginfo0:0-2.585svn.el7satlibstemmer-debuginfo-0:0-2.585svn.el7sat.x86_64.rpm
Red Hat Enterprise Linux7x86_64libwebsockets0:2.1.0-3.el7libwebsockets-0:2.1.0-3.el7.x86_64.rpm
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Nov 2025 17:21Current
6.6Medium risk
Vulners AI Score6.6
CVSS 25.8
CVSS 36.5
EPSS0.04267
2