Denial of service vulnerability exists when .NET and .NET Core improperly process XML documents

A Denial of Service vulnerability was found in Apache Qpid Broker-J versions 7.x before 7.1.0 when AMQP protocols 0-8, 0-9 or 0-91 are used to publish messages with size greater than allowed maximum message size limit 100MB by default. The broker crashes due to the defect. AMQP protocols 0-10 and...

GHSA-7XR3-RGWH-PW22 Denial of service vulnerability exists when .NET and .NET Core improperly process XML documents

A Denial of Service vulnerability was found in Apache Qpid Broker-J versions 7.x before 7.1.0 when AMQP protocols 0-8, 0-9 or 0-91 are used to publish messages with size greater than allowed maximum message size limit 100MB by default. The broker crashes due to the defect. AMQP protocols 0-10 and...

GHSA-F5CF-F7PX-XPMH Moderate severity vulnerability that affects org.apache.qpid:proton-j

The 1 proton.reactor.Connector, 2 proton.reactor.Container, and 3 proton.utils.BlockingConnection classes in Apache Qpid Proton before 0.12.1 improperly use an unencrypted connection for an amqps URI scheme when SSL support is unavailable, which might allow man-in-the-middle attackers to obtain...

Moderate severity vulnerability that affects org.apache.qpid:proton-j

The 1 proton.reactor.Connector, 2 proton.reactor.Container, and 3 proton.utils.BlockingConnection classes in Apache Qpid Proton before 0.12.1 improperly use an unencrypted connection for an amqps URI scheme when SSL support is unavailable, which might allow man-in-the-middle attackers to obtain...

Improper Input Validation in org.apache.qpid:qpid-broker

PlainSaslServer.java in Apache Qpid Java before 6.0.3, when the broker is configured to allow plaintext passwords, allows remote attackers to cause a denial of service broker termination via a crafted authentication attempt, which triggers an uncaught exception...

org.apache.qpid:qpid-bdbstore (0.14) potentially affected by CVE-2016-3094 via org.apache.qpid:qpid-broker (0.14)

org.apache.qpid:qpid-broker MAVEN version 0.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.qpid:qpid-broker and may be impacted: - org.apache.qpid:qpid-bdbstore 0.14 Source cves: CVE-2016-3094 Source advisory: OSV:GHSA-JJ9H-MWHQ-8VHM...

com.dell.cpsd.common.messaging:common-testing (1.5.0), com.dell.cpsd:common-testing (>=2.0.0, <=2.2.0) +1 more potentially affected by CVE-2016-3094 via org.apache.qpid:qpid-broker (0.28)

org.apache.qpid:qpid-broker MAVEN version 0.28 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.qpid:qpid-broker and may be impacted: - com.dell.cpsd.common.messaging:common-testing 1.5.0 - com.dell.cpsd:common-testing =2.0.0, =1.0.0, =1.1...

org.apache.qpid:qpid-bdbstore (0.18), org.apache.qpid:qpid-bdbstore-jmx (0.18) +4 more potentially affected by CVE-2016-3094 via org.apache.qpid:qpid-broker (0.18)

org.apache.qpid:qpid-broker MAVEN version 0.18 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.qpid:qpid-broker and may be impacted: - org.apache.qpid:qpid-bdbstore 0.18 - org.apache.qpid:qpid-bdbstore-jmx 0.18 -...

org.apache.qpid:qpid-bdbstore (0.16) potentially affected by CVE-2016-3094 via org.apache.qpid:qpid-broker (0.16)

org.apache.qpid:qpid-broker MAVEN version 0.16 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.qpid:qpid-broker and may be impacted: - org.apache.qpid:qpid-bdbstore 0.16 Source cves: CVE-2016-3094 Source advisory: OSV:GHSA-JJ9H-MWHQ-8VHM...

com.confluex:qpid-in-a-can (0.2.0), org.apache.qpid:qpid-bdbstore (0.24) +14 more potentially affected by CVE-2016-3094 via org.apache.qpid:qpid-broker (0.24)

org.apache.qpid:qpid-broker MAVEN version 0.24 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.qpid:qpid-broker and may be impacted: - com.confluex:qpid-in-a-can 0.2.0 - org.apache.qpid:qpid-bdbstore 0.24 - org.apache.qpid:qpid-bdbstore-jmx...

GHSA-JJ9H-MWHQ-8VHM Improper Input Validation in org.apache.qpid:qpid-broker

PlainSaslServer.java in Apache Qpid Java before 6.0.3, when the broker is configured to allow plaintext passwords, allows remote attackers to cause a denial of service broker termination via a crafted authentication attempt, which triggers an uncaught exception...

io.relayr:rabbitmq-scala-client_2.10 (>=0.1, <=0.1.1), io.relayr:rabbitmq-scala-client_2.11 (>=0.1, <=0.1.1) potentially affected by CVE-2016-3094 via org.apache.qpid:qpid-broker (0.30)

org.apache.qpid:qpid-broker MAVEN version 0.30 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.qpid:qpid-broker and may be impacted: - io.relayr:rabbitmq-scala-client2.10 =0.1, =0.1, =0.1.1 Source cves: CVE-2016-3094 Source advisory:...

AMQP 0-8, 0-9, 0-91, and 0-10 connection handling in Apache Qpid Java before 6.0.3 might allow remote attackers to bypass authentication

The AMQP 0-8, 0-9, 0-91, and 0-10 connection handling in Apache Qpid Java before 6.0.3 might allow remote attackers to bypass authentication and consequently perform actions via vectors related to connection state logging...

com.dell.cpsd.common.messaging:common-testing (1.5.0), com.dell.cpsd:common-testing (>=2.0.0, <=2.2.0) +4 more potentially affected by CVE-2016-4432 via org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol (0.28)

org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol MAVEN version 0.28 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol and may be impacted: - com.dell.cpsd.common.messaging:common-testing 1.5.0 -...

com.confluex:qpid-in-a-can (0.2.0), org.apache.qpid:qpid-bdbstore (0.24) +14 more potentially affected by CVE-2016-4432 via org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol (0.24)

org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol MAVEN version 0.24 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol and may be impacted: - com.confluex:qpid-in-a-can 0.2.0 -...

org.apache.qpid:qpid-bdbstore (>=6.0.0, <=6.0.2), org.apache.qpid:qpid-bdbstore-jmx (>=6.0.0, <=6.0.2) +3 more potentially affected by CVE-2016-4432 via org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol (>=6.0.0, <=6.0.2)

org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.2 Source cves: CVE-2016-4432 Source advisory: OSV:GHSA-Q66C-H853-GQW2...

io.relayr:rabbitmq-scala-client_2.10 (>=0.1, <=0.1.1), io.relayr:rabbitmq-scala-client_2.11 (>=0.1, <=0.1.1) +5 more potentially affected by CVE-2016-4432 via org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol (0.30)

org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol MAVEN version 0.30 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol and may be impacted: - io.relayr:rabbitmq-scala-client2.10 =0.1, =0.1, =0.1.1...

org.apache.qpid:qpid-broker (>=6.0.0, <=6.0.2), org.apache.qpid:qpid-broker-plugins-amqp-msg-conv-0-10-to-1-0 (>=6.0.0, <=6.0.2) +1 more potentially affected by CVE-2016-4432 via org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol (>=6.0.0, <=6.0.2)

org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.2 Source cves: CVE-2016-4432 Source advisory: OSV:GHSA-Q66C-H853-GQW2...

com.dell.cpsd.common.messaging:common-testing (1.5.0), com.dell.cpsd:common-testing (>=2.0.0, <=2.2.0) +5 more potentially affected by CVE-2016-4432 via org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol (0.28)

org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol MAVEN version 0.28 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol and may be impacted: - com.dell.cpsd.common.messaging:common-testing 1.5.0 -...

org.apache.qpid:qpid-bdbstore (0.26), org.apache.qpid:qpid-broker (0.26) +2 more potentially affected by CVE-2016-4432 via org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol (0.26)

org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol MAVEN version 0.26 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol and may be impacted: - org.apache.qpid:qpid-bdbstore 0.26 -...