132 matches found
CVE-2026-66275
CVE-2026-66275 affects Apache Qpid Proton-J up to version 0.34.1. An authenticated attacker could exceed the session flow control incoming window, potentially causing a denial of service. The issue is mitigated by upgrading to version 0.35.0. The CVSS 3.1 vector indicates network attack with low ...
EUVD-2026-53086
An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service. This issue affects Apache Qpid Proton-J: through 0.34.1. Users are recommended to upgrade to version 0.35.0, which fixes the issue...
CVE-2026-67552 Apache Qpid Proton Dotnet: Unbounded type nesting can lead to pre-authentication stackoverflow
A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qpid Proton-Dotnet through 1.0.0. Users are recommended to upgrade to version 1.1.0, which fixes the issue...
CVE-2026-67552
Apache Qpid Proton-Dotnet (up to version 1.0.0) is affected by CVE-2026-67552 due to unbounded type nesting that can cause a pre-authentication StackOverflowError, potentially leading to denial of service. The vulnerability arises from excessive nesting in type handling and does not require user ...
EUVD-2026-53084
A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qpid Proton-Dotnet through 1.0.0. Users are recommended to upgrade to version 1.1.0, which fixes the issue...
CVE-2026-66274 Apache Qpid Proton-J: Unbounded type nesting can lead to pre-authentication stackoverflow
A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qpid Proton-J: through 0.34.1. Users are recommended to upgrade to version 0.35.0, which fixes the issue...
CVE-2026-66274
CVE-2026-66274 affects Apache Qpid Proton-J (up to 0.34.1). A pre-authentication attacker can exploit unbounded type nesting to trigger a StackOverflowError, leading to denial of service. Impact is limited to availability; no confidentiality or integrity impact stated. Upgrade to version 0.35.0, ...
CVE-2026-67551
CVE-2026-67551 : A pre-authentication issue affects Apache Qpid Proton-Dotnet (through version 1.0.0) where improper handling of type size/count can cause excessive memory allocation, leading to a potential denial of service . The vulnerability is mitigated by upgrading to version 1.1.0 , which f...
EUVD-2026-53057
pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects Apache Qpid Proton-Dotnet: through 1.0.0. Users are recommended to upgrade to version 1.1.0, which fixes the issue...
CVE-2026-67551 Apache Qpid Proton Dotnet: Type size/count handling can lead to excessive allocation pre-authentication
pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects Apache Qpid Proton-Dotnet: through 1.0.0. Users are recommended to upgrade to version 1.1.0, which fixes the issue...
CVE-2026-66273
CVE-2026-66273 affects Apache Qpid Proton-J up to version 0.34.1. The issue is a pre-authentication vulnerability where improper handling of type size/count can cause excessive memory allocation, leading to denial of service. The advisory recommends upgrading to version 0.35.0, which contains the...
EUVD-2026-53055
A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects Apache Qpid Proton-J: through 0.34.1. Users are recommended to upgrade to version 0.35.0, which fixes the issue...
CVE-2026-67465
A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service. This issue affects Apache Qpid Proton-Dotnet: through 1.0.0. Users are recommended to upgrade to version 1.1.0, which fixes the issue...
CVE-2026-67465 Apache Qpid Proton Dotnet: Unbounded symbol value caching can lead to pre-authentication resource exhaustion
A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service. This issue affects Apache Qpid Proton-Dotnet: through 1.0.0. Users are recommended to upgrade to version 1.1.0, which fixes the issue...
CVE-2026-66257 Apache Qpid Proton-J: Unbounded symbol value caching can lead to pre-authentication resource exhaustion
A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service. This issue affects Apache Qpid Proton-J: through 0.34.1. Users are recommended to upgrade to version 0.35.0, which fixes the issue...
CVE-2026-66257
The CVE-2026-66257 entry applies to Apache Qpid Proton-J up to version 0.34.1. The root cause is unbounded symbol value caching, which allows a pre-authentication attacker to exhaust resources and cause denial of service. The available sources consistently report the impact as resource exhaustion...
CVE-2026-66257
A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service. This issue affects Apache Qpid Proton-J: through 0.34.1. Users are recommended to upgrade to version 0.35.0, which fixes the issue...
EUVD-2018-0790
Malware in sbrugna...