apache-qpid-proton-dotnet: Apache Qpid Proton-Dotnet: Denial of Service via unbounded symbol value caching

A flaw was found in Apache Qpid Proton-Dotnet. A remote, unauthenticated attacker could exploit this vulnerability by leveraging unbounded symbol value caching, which can lead to resource exhaustion. This can cause a denial of service DoS, making the affected system unavailable to legitimate user...

Apache Qpid Proton-Dotnet: Apache Qpid Proton-Dotnet: Denial of Service via unbounded type nesting

A flaw was found in Apache Qpid Proton-Dotnet. This vulnerability allows a remote attacker, without needing to authenticate, to exploit a weakness in how the software handles data structures with excessive nesting. This can lead to a StackOverflowError, which ultimately results in a denial of...

Apache Qpid Proton-Dotnet: Apache Qpid Proton Dotnet: Denial of Service via excessive memory allocation

A flaw was found in Apache Qpid Proton Dotnet. A remote, unauthenticated attacker could exploit a vulnerability in the handling of type sizes and counts. This could lead to excessive memory allocation, resulting in a denial of service DoS for the affected system...

CVE-2026-67465

A flaw was found in Apache Qpid Proton-Dotnet. A remote, unauthenticated attacker could exploit this vulnerability by leveraging unbounded symbol value caching, which can lead to resource exhaustion. This can cause a denial of service DoS, making the affected system unavailable to legitimate user...

CVE-2026-67555

It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial of service This issue affects Apache Qpid Proton-Dotnet: through 1.0.0. Users are recommended to upgrade to version...

CVE-2026-67552

A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qpid Proton-Dotnet through 1.0.0. Users are recommended to upgrade to version 1.1.0, which fixes the issue...

CVE-2026-67553

An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service. This issue affects Apache Qpid Proton-Dotnet: through 1.0.0. Users are recommended to upgrade to version 1.1.0, which fixes the issue...

CVE-2026-67554

An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessive CPU usage due to naive range handling, leading to denial of service. This issue affects Apache Qpid Proton-Dotnet: through 1.0.0. Users are recommended to upgrade to version 1.1.0, which fixes t...

CVE-2026-67465

A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service. This issue affects Apache Qpid Proton-Dotnet: through 1.0.0. Users are recommended to upgrade to version 1.1.0, which fixes the issue...

CVE-2026-67551

pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects Apache Qpid Proton-Dotnet: through 1.0.0. Users are recommended to upgrade to version 1.1.0, which fixes the issue...

CVE-2026-67555 Apache Qpid Proton Dotnet: Unable to govern the maximum number of transfer frames per incoming delivery

It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial of service This issue affects Apache Qpid Proton-Dotnet: through 1.0.0. Users are recommended to upgrade to version...

CVE-2026-67555 Apache Qpid Proton Dotnet: Unable to govern the maximum number of transfer frames per incoming delivery

It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial of service This issue affects Apache Qpid Proton-Dotnet: through 1.0.0. Users are recommended to upgrade to version...

CVE-2026-67555

The Apache Qpid Proton-Dotnet library (versions through 1.0.0 ) is vulnerable to a resource exhaustion issue because it fails to govern the maximum number of transfer frames per incoming delivery. This allows an authenticated attacker to trigger excessive resource usage, potentially resulting in ...

CVE-2026-67555 Apache Qpid Proton Dotnet: Unable to govern the maximum number of transfer frames per incoming delivery

It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial of service This issue affects Apache Qpid Proton-Dotnet: through 1.0.0. Users are recommended to upgrade to version...

CVE-2026-67554 Apache Qpid Proton Dotnet: Unbounded disposition range handling can lead to denial of service

An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessive CPU usage due to naive range handling, leading to denial of service. This issue affects Apache Qpid Proton-Dotnet: through 1.0.0. Users are recommended to upgrade to version 1.1.0, which fixes t...

CVE-2026-67554

The Apache Qpid Proton-Dotnet library (versions through 1.0.0 ) is vulnerable to a Denial of Service (DoS) condition. An authenticated attacker can exploit naive range handling by crafting a disposition frame containing large or illegal ranges, which triggers excessive CPU usage . To remediate th...

CVE-2026-67554 Apache Qpid Proton Dotnet: Unbounded disposition range handling can lead to denial of service

An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessive CPU usage due to naive range handling, leading to denial of service. This issue affects Apache Qpid Proton-Dotnet: through 1.0.0. Users are recommended to upgrade to version 1.1.0, which fixes t...

EUVD-2026-53092

An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessive CPU usage due to naive range handling, leading to denial of service. This issue affects Apache Qpid Proton-Dotnet: through 1.0.0. Users are recommended to upgrade to version 1.1.0, which fixes t...

CVE-2026-67553

The Apache Qpid Proton-Dotnet library (versions through 1.0.0 ) is vulnerable to a resource exhaustion issue where an authenticated attacker can exceed the session flow control incoming window . This flaw could potentially lead to a denial of service (DoS) . To remediate this vulnerability, users...

EUVD-2026-53088

An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service. This issue affects Apache Qpid Proton-Dotnet: through 1.0.0. Users are recommended to upgrade to version 1.1.0, which fixes the issue...