1008 matches found
org.apache.qpid:qpid-broker (>=6.0.0, <=6.0.2), org.apache.qpid:qpid-broker-plugins-amqp-msg-conv-0-10-to-1-0 (>=6.0.0, <=6.0.2) +1 more potentially affected by CVE-2016-4432 via org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol (>=6.0.0, <=6.0.2)
org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.2 Source cves: CVE-2016-4432 Source advisory: GHSA-Q66C-H853-GQW2...
org.apache.qpid:qpid-broker (0.26), org.apache.qpid:qpid-broker-plugins-amqp-msg-conv-0-10-to-1-0 (0.26) +1 more potentially affected by CVE-2016-4432 via org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol (0.26)
org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol MAVEN version 0.26 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol and may be impacted: - org.apache.qpid:qpid-broker 0.26 -...
com.confluex:qpid-in-a-can (0.2.0), org.apache.qpid:qpid-bdbstore (0.24) +14 more potentially affected by CVE-2016-4432 via org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol (0.24)
org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol MAVEN version 0.24 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol and may be impacted: - com.confluex:qpid-in-a-can 0.2.0 -...
io.relayr:rabbitmq-scala-client_2.10 (>=0.1, <=0.1.1), io.relayr:rabbitmq-scala-client_2.11 (>=0.1, <=0.1.1) +3 more potentially affected by CVE-2016-4432 via org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol (0.30)
org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol MAVEN version 0.30 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol and may be impacted: - io.relayr:rabbitmq-scala-client2.10 =0.1, =0.1, =0.1.1...
GHSA-Q66C-H853-GQW2 AMQP 0-8, 0-9, 0-91, and 0-10 connection handling in Apache Qpid Java before 6.0.3 might allow remote attackers to bypass authentication
The AMQP 0-8, 0-9, 0-91, and 0-10 connection handling in Apache Qpid Java before 6.0.3 might allow remote attackers to bypass authentication and consequently perform actions via vectors related to connection state logging...
RHEL 6 : qpid (RHSA-2015:0707)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:0707 advisory. Red Hat Enterprise MRG is a next-generation IT infrastructure incorporating Messaging, Real Time, and Grid functionality. It offers increase...
CVE-2018-8030
A Denial of Service vulnerability was found in Apache Qpid Broker-J versions 7.0.0-7.0.4 when AMQP protocols 0-8, 0-9 or 0-91 are used to publish messages with size greater than allowed maximum message size limit 100MB by default. The broker crashes due to the defect. AMQP protocols 0-10 and 1.0...
CVE-2018-8030
A Denial of Service vulnerability was found in Apache Qpid Broker-J versions 7.0.0-7.0.4 when AMQP protocols 0-8, 0-9 or 0-91 are used to publish messages with size greater than allowed maximum message size limit 100MB by default. The broker crashes due to the defect. AMQP protocols 0-10 and 1.0...
Denial of service
A Denial of Service vulnerability was found in Apache Qpid Broker-J versions 7.0.0-7.0.4 when AMQP protocols 0-8, 0-9 or 0-91 are used to publish messages with size greater than allowed maximum message size limit 100MB by default. The broker crashes due to the defect. AMQP protocols 0-10 and 1.0...
CVE-2018-8030
CVE-2018-8030 affects Apache Qpid Broker-J 7.0.0–7.0.4 when publishing AMQP messages larger than the default maximum (100 MB) using protocols 0-8, 0-9, or 0-91. The defect causes the broker to crash, representing a Denial of Service (DoS). Affected protocols 0-10 and 1.0 are not affected. The pro...
CVE-2018-8030
A Denial of Service vulnerability was found in Apache Qpid Broker-J versions 7.0.0-7.0.4 when AMQP protocols 0-8, 0-9 or 0-91 are used to publish messages with size greater than allowed maximum message size limit 100MB by default. The broker crashes due to the defect. AMQP protocols 0-10 and 1.0...
CVE-2018-8030
A Denial of Service vulnerability was found in Apache Qpid Broker-J versions 7.0.0-7.0.4 when AMQP protocols 0-8, 0-9 or 0-91 are used to publish messages with size greater than allowed maximum message size limit 100MB by default. The broker crashes due to the defect. AMQP protocols 0-10 and 1.0...
Denial Of Service (DoS)
apache-qpid-broker-j is vulnerable to denial of service DoS attacks. The vulnerability exists due to the incorrect maximum message size check...
CVE-2018-8030: Improper Input Validation
A Denial of Service vulnerability was found in Apache Qpid Broker-J versions 7.0.0-7.0.4 when AMQP protocols 0-8, 0-9 or 0-91 are used to publish messages with size greater than allowed maximum message size limit 100MB by default. The broker crashes due to the defect. AMQP protocols 0-10 and 1.0...
PT-2018-18394
Name of the Vulnerable Software and Affected Versions: Apache Qpid Broker-J versions 7.0.0 through 7.0.4 Apache Qpid Broker-J versions prior to 7.1.0 Description: A Denial of Service issue was found when using AMQP protocols 0-8, 0-9, or 0-91 to publish messages with a size greater than the allow...
Security Bulletin: IBM SmartCloud Orchestrator - OpenStack Compute SSL information disclosure (CVE-2013-6491)
Summary An attacker might exploit this vulnerability using man-in-the-middle techniques to obtain sensitive information. The python-qpid client common/rpc/implqpid.py in OpenStack Oslo before 2013.2 does not enforce SSL connections when qpidprotocol is set to ssl. It allows remote attackers to...
qpid-proton/fuzz-connection-driver: Crash in __msan_memmove.part.53
Project: https://github.com/apache/qpid-proton.git Detailed report: https://oss-fuzz.com/testcase?key=6266408911503360 Project: qpid-proton Fuzzer: libFuzzerqpid-protonfuzz-connection-driver Fuzz target binary: fuzz-connection-driver Job Type: libfuzzermsanqpid-proton Platform Id: linux Crash Typ...
qpid-proton/fuzz-connection-driver: Index-out-of-bounds in pni_inspect_enter
Project: https://github.com/apache/qpid-proton.git Detailed report: https://oss-fuzz.com/testcase?key=6237435934539776 Project: qpid-proton Fuzzer: libFuzzerqpid-protonfuzz-connection-driver Fuzz target binary: fuzz-connection-driver Job Type: libfuzzerubsanqpid-proton Platform Id: linux Crash...
qpid-proton/fuzz-connection-driver: Negative-size-param in transport_consume
Project: https://github.com/apache/qpid-proton.git Detailed report: https://oss-fuzz.com/testcase?key=6301141305393152 Project: qpid-proton Fuzzer: aflqpid-protonfuzz-connection-driver Fuzz target binary: fuzz-connection-driver Job Type: aflasanqpid-proton Platform Id: linux Crash Type:...
qpid-proton/fuzz-message-decode: Heap-buffer-overflow in pni_decoder_decode_value
Project: https://github.com/apache/qpid-proton.git Detailed report: https://oss-fuzz.com/testcase?key=5311329584807936 Project: qpid-proton Fuzzer: aflqpid-protonfuzz-message-decode Fuzz target binary: fuzz-message-decode Job Type: aflasanqpid-proton Platform Id: linux Crash Type:...