Memory Allocation with Excessive Size Value

Overview org.apache.qpid:proton-j is a lightweight messaging library. Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value via improper handling of type size and count during the allocation process. An attacker can trigger excessive memory allocation by...

Allocation of Resources Without Limits or Throttling

Overview org.apache.qpid:proton-j is a lightweight messaging library. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via unbounded caching of symbol values. An attacker can exhaust system resources by sending specially crafted data prior t...

Allocation of Resources Without Limits or Throttling

Overview org.apache.qpid:proton-j is a lightweight messaging library. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through improper enforcement of the session flow control process. An attacker can cause resource exhaustion by sending dat...

Unchecked Input for Loop Condition

Overview org.apache.qpid:proton-j is a lightweight messaging library. Affected versions of this package are vulnerable to Unchecked Input for Loop Condition via the disposition process. An attacker can cause excessive CPU usage and disrupt service availability by sending crafted frames with large...

CVE-2026-41714

Spring AMQP 2.4.x/3.1.x/3.2.x/4.0.x (versions 2.4.0–2.4.17, 3.1.0–3.1.15, 3.2.0–3.2.10, 4.0.0–4.0.3) are affected by CVE-2026-41714. The issue occurs when a broker connection is configured via RabbitConnectionFactoryBean.setUri("amqps://...") without calling setUseSSL(true). This leads to TLS enc...

The vulnerability in the xpub.cpp component of the ZeroMQ messaging library, related to improper memory release before deleting the last reference, allows a violator to trigger a service failure.

The vulnerability of the xpub.cpp component in the ZeroMQ messaging library relates to improper memory release before deleting the last reference. Exploiting this vulnerability could allow an attacker to cause a service failure...

Fedora: Security Advisory for disruptor (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 40 Update: disruptor-3.4.4-11.fc40

A High Performance Inter-Thread Messaging Library...

Microsoft Azure uAMQP Security Vulnerability

Microsoft Azure uAMQP is a library from Microsoft Corporation USA. A security vulnerability exists in versions of Microsoft Azure uAMQP prior to 2023-2-07, which stems from a double release issue that could lead to an RCE when incorrect AMQPVALUE failure states are processed...

CVE-2023-40648

In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2023-40641

In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2023-40646

In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2021-4198

A NULL Pointer Dereference vulnerability in the messagingipc.dll component as used in Bitdefender Total Security, Internet Security, Antivirus Plus, Endpoint Security Tools, VPN Standalone allows an attacker to arbitrarily crash product processes and generate crashdump files. This issue affects:...

The vulnerability of the Mojo messaging library in Microsoft Edge and Google Chrome allows a hacker to execute arbitrary code.

The vulnerability of the Mojo messaging library in Microsoft Edge and Google Chrome lies in the insufficient validation of input data during the processing of HTML content. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created malicious web...

ZeroMQ 资源管理错误漏洞

ZeroMQ is a lightweight distributed messaging engine core library . A security vulnerability exists in ZeroMQ that stems from an uncontrolled resource consumption flaw. A remote, unauthenticated attacker can exploit the vulnerability to send a crafted PUB message that consumes too much memory,...

The vulnerability of the Mojo messaging library in Google Chrome browsers allows attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the Mojo messaging library in Google Chrome browsers is related to the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause...

The vulnerability of the CServerManager::HandleBrowseLoadIconStreamRequest function in the FactoryTalk Linx automation software allows a intruder to trigger a service failure.

The vulnerability of the CServerManager::HandleBrowseLoadIconStreamRequest function messaging.dll in the FactoryTalk Linx automation software is related to the unlimited distribution of resources. Exploiting this vulnerability could allow an attacker to cause a service failure by sending a...

PT-2020-5793

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 85.0.4183.102 Description: The issue is related to a race condition in the Mojo messaging library of Google Chrome, which can be exploited by a remote attacker who has compromised the renderer process. This cou...

PT-2018-3187

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 69.0.3497.81 Description The issue exists due to insufficient input validation in the Mojo messaging library of Google Chrome. It allows a remote attacker to potentially perform a sandbox escape by using a...

[SECURITY] Fedora 23 Update: qpid-proton-0.12.1-1.fc23

Proton is a high performance, lightweight messaging library. It can be used in the widest range of messaging applications including brokers, client librar ies, routers, bridges, proxies, and more. Proton is based on the AMQP 1.0 messag ing standard. Using Proton it is trivial to integrate with th...