371 matches found
Apache Qpid security vulnerabilities
DoS, non-switchable anonymous access...
CVE-2015-0224: qpidd can be crashed by unauthenticated user
Apache Software Foundation - Security Advisory qpidd can be crashed by unauthenticated user CVE-2015-0224 CVS: 7.8 Severity: Moderate Vendor: The Apache Software Foundation Versions Affected: Apache Qpid's qpidd up to and including version 0.30 Description: In CVE-2015-0203 it was announced that...
Apache Qpid Security Bypass Vulnerability
Apache Qpid Open Source AMQP Messaging is a cross-platform enterprise communications solution that implements an advanced message queuing protocol . A security bypass vulnerability exists in Apache Qpid due to the program failing to adequately process user-supplied input. An attacker could use th...
Apache Qpid Incomplete Fix for Denial of Service Vulnerability
Apache Qpid Open Source AMQP Messaging is a cross-platform enterprise communications solution that implements an advanced message queuing protocol . Apache Qpid suffers from an incomplete fix for a denial of service vulnerability that can be exploited by an attacker to crash the proxy process and...
Multiple Denial of Service Vulnerabilities in Apache Qpid
Apache Qpid Open Source AMQP Messaging is a cross-platform enterprise communications solution that implements an advanced message queuing protocol . Apache Qpid has multiple denial of service vulnerabilities that could be exploited by remote attackers to crash the proxy program, resulting in a...
CVE-2015-0203: Apache Qpid's qpidd can be crashed by authenticated user
Apache Software Foundation - Security Advisory Apache Qpid's qpidd can be crashed by authenticated user CVE-2015-0203 CVS: 5.2 Severity: Moderate Vendor: The Apache Software Foundation Versions Affected: Apache Qpid's qpidd up to and including version 0.30 Description: Certain unexpected protocol...
Apache qpid DoS
Multiple asserts...
CVE-2014-3629: Apache Qpid's qpidd can be induced to make http requests
Apache Software Foundation - Security Advisory Apache Qpid's qpidd can be induced to make http requests CVE-2014-3629 CVS: 3 Severity: Low Vendor: The Apache Software Foundation Versions Affected: Apache Qpid's qpidd up to and including version 0.30, where xml exchange module is loaded Descriptio...
CVE-2014-3629
XML external entity XXE vulnerability in the XML Exchange module in Apache Qpid 0.30 allows remote attackers to cause outgoing HTTP connections via a crafted message...
Xxe
XML external entity XXE vulnerability in the XML Exchange module in Apache Qpid 0.30 allows remote attackers to cause outgoing HTTP connections via a crafted message...
CVE-2014-3629
XML external entity XXE vulnerability in the XML Exchange module in Apache Qpid 0.30 allows remote attackers to cause outgoing HTTP connections via a crafted message...
UBUNTU-CVE-2014-3629
XML external entity XXE vulnerability in the XML Exchange module in Apache Qpid 0.30 allows remote attackers to cause outgoing HTTP connections via a crafted message...
CVE-2014-3629
XML external entity XXE vulnerability in the XML Exchange module in Apache Qpid 0.30 allows remote attackers to cause outgoing HTTP connections via a crafted message...
RHEL 5 : MRG (RHSA-2013:0561)
Updated Messaging component packages that fix multiple security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise MRG 2.3 for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common...
RHEL 6 : Red Hat Enterprise MRG Messaging 2.3 (RHSA-2013:0562)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2013:0562 advisory. Red Hat Enterprise MRG Messaging, Realtime, and Grid is a next-generation IT infrastructure for enterprise computing. MRG offers increased...
RHEL 6 : MRG Messaging (RHSA-2012:1279)
Updated Messaging component packages that fix one security issue, multiple bugs, and add various enhancements are now available for Red Hat Enterprise MRG 2.2 for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common...
CVE-2013-4261
OpenStack Compute Nova Folsom, Grizzly, and earlier, when using Apache Qpid for the RPC backend, does not properly handle errors that occur during messaging, which allows remote attackers to cause a denial of service connection pool consumption, as demonstrated using multiple requests that send...
CVE-2013-4261
OpenStack Compute Nova Folsom, Grizzly, and earlier, when using Apache Qpid for the RPC backend, does not properly handle errors that occur during messaging, which allows remote attackers to cause a denial of service connection pool consumption, as demonstrated using multiple requests that send...
DEBIAN-CVE-2013-4261
OpenStack Compute Nova Folsom, Grizzly, and earlier, when using Apache Qpid for the RPC backend, does not properly handle errors that occur during messaging, which allows remote attackers to cause a denial of service connection pool consumption, as demonstrated using multiple requests that send...
Design/Logic Flaw
OpenStack Compute Nova Folsom, Grizzly, and earlier, when using Apache Qpid for the RPC backend, does not properly handle errors that occur during messaging, which allows remote attackers to cause a denial of service connection pool consumption, as demonstrated using multiple requests that send...