CVE-2026-114230

When dispatching SASL frames to authenticate the peer, Proton will also dispatch AMQP frames if they claim to be SASL frames. This allows authentication bypass. However there will be no user name set so the effects depend on how the application deals with this condition - which otherwise means th...

EUVD-2026-112719

When dispatching SASL frames to authenticate the peer, Proton will also dispatch AMQP frames if they claim to be SASL frames. This allows authentication bypass. However there will be no user name set so the effects depend on how the application deals with this condition - which otherwise means th...

CVE-2026-114230

The Apache Qpid Proton C library (versions through 0.40.0 ) is vulnerable to an authentication bypass due to a flaw in how it dispatches SASL frames. Specifically, the system will also dispatch AMQP frames if they claim to be SASL frames. While this bypass occurs, no username is set, meaning the ...

FreeBSD : redpanda-connect -- memory exhaustion via oversized AMQP frames (5d69ee28-adb9-11f1-9d0e-4c526214c986)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 5d69ee28-adb9-11f1-9d0e-4c526214c986 advisory. amqp091-go developers report: Before version 1.13.0, a compromised or malicious AMQP broker can force t...

redpanda-connect -- memory exhaustion via oversized AMQP frames

amqp091-go developers report: Before version 1.13.0, a compromised or malicious AMQP broker can force the client to allocate resources for and process content body frames that exceed the negotiated framemax limit. This can lead to unexpected memory consumption or application-layer denial of servi...

PT-2017-14150 · Apache · Apache Qpid Broker-J

Name of the Vulnerable Software and Affected Versions: Apache Qpid Broker-J versions 6.1.0 through 6.1.4 Description: The issue arises from the broker's failure to properly enforce a maximum frame size in AMQP 1.0 frames, allowing a remote unauthenticated attacker to cause the broker to exhaust a...