K23675185: Apache Qpid vulnerabilities CVE-2016-3094 and CVE-2016-4432

Security Advisory Description CVE-2016-3094 PlainSaslServer.java in Apache Qpid Java before 6.0.3, when the broker is configured to allow plaintext passwords, allows remote attackers to cause a denial of service broker termination via a crafted authentication attempt, which triggers an uncaught...

org.apache.qpid:qpid-bdbstore (0.22), org.apache.qpid:qpid-bdbstore-jmx (0.22) +3 more potentially affected by CVE-2016-3094 via org.apache.qpid:qpid-broker (0.22)

org.apache.qpid:qpid-broker MAVEN version 0.22 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.qpid:qpid-broker and may be impacted: - org.apache.qpid:qpid-bdbstore 0.22 - org.apache.qpid:qpid-bdbstore-jmx 0.22 -...

org.apache.qpid:qpid-bdbstore (0.20), org.apache.qpid:qpid-bdbstore-jmx (0.20) +3 more potentially affected by CVE-2016-3094 via org.apache.qpid:qpid-broker (0.20)

org.apache.qpid:qpid-broker MAVEN version 0.20 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.qpid:qpid-broker and may be impacted: - org.apache.qpid:qpid-bdbstore 0.20 - org.apache.qpid:qpid-bdbstore-jmx 0.20 -...

org.apache.qpid:qpid-bdbstore (0.16) potentially affected by CVE-2016-3094 via org.apache.qpid:qpid-broker (0.16)

org.apache.qpid:qpid-broker MAVEN version 0.16 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.qpid:qpid-broker and may be impacted: - org.apache.qpid:qpid-bdbstore 0.16 Source cves: CVE-2016-3094 Source advisory: OSV:GHSA-JJ9H-MWHQ-8VHM...

org.apache.qpid:qpid-bdbstore (0.18), org.apache.qpid:qpid-bdbstore-jmx (0.18) +4 more potentially affected by CVE-2016-3094 via org.apache.qpid:qpid-broker (0.18)

org.apache.qpid:qpid-broker MAVEN version 0.18 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.qpid:qpid-broker and may be impacted: - org.apache.qpid:qpid-bdbstore 0.18 - org.apache.qpid:qpid-bdbstore-jmx 0.18 -...

io.snamp.features:wrapped-libs-for-tests (2.0.0) potentially affected by CVE-2016-3094 via org.apache.qpid:qpid-broker (0.32)

org.apache.qpid:qpid-broker MAVEN version 0.32 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.qpid:qpid-broker and may be impacted: - io.snamp.features:wrapped-libs-for-tests 2.0.0 Source cves: CVE-2016-3094 Source advisory:...

org.apache.qpid:qpid-bdbstore (0.14) potentially affected by CVE-2016-3094 via org.apache.qpid:qpid-broker (0.14)

org.apache.qpid:qpid-broker MAVEN version 0.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.qpid:qpid-broker and may be impacted: - org.apache.qpid:qpid-bdbstore 0.14 Source cves: CVE-2016-3094 Source advisory: OSV:GHSA-JJ9H-MWHQ-8VHM...

SOL23675185 - Apache Qpid vulnerabilities CVE-2016-3094 and CVE-2016-4432

Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...

CVE-2016-3094

PlainSaslServer.java in Apache Qpid Java before 6.0.3, when the broker is configured to allow plaintext passwords, allows remote attackers to cause a denial of service broker termination via a crafted authentication attempt, which triggers an uncaught exception...

CVE-2016-3094

CVE-2016-3094 - Affected software and root cause: Apache Qpid Java broker prior to 6.0.3, when configured to allow plaintext passwords, is vulnerable via the PlainSaslServer.java authentication path. An attacker can trigger an uncaught exception through a crafted authentication attempt, leading t...

com.confluex:qpid-in-a-can (0.2.0), com.dell.cpsd.common.messaging:common-testing (1.5.0) +21 more potentially affected by CVE-2016-3094 via org.apache.qpid:qpid-broker (>=0.14, <=0.32)

org.apache.qpid:qpid-broker MAVEN version =0.14, =2.0.0, =1.0.0, =0.1, =0.1, =0.14, =0.18, =0.18, =0.24 - org.apache.qpid:qpid-broker-plugins-amqp-0-10-protocol 0.24 - org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol 0.24 - org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol 0.24 -...

CVE-2016-3094

PlainSaslServer.java in Apache Qpid Java before 6.0.3, when the broker is configured to allow plaintext passwords, allows remote attackers to cause a denial of service broker termination via a crafted authentication attempt, which triggers an uncaught exception...