18 matches found
Memory Allocation with Excessive Size Value
Overview org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol is an AMQP 0-8, 0-9 and 0-9-1 protocol broker plug-in. Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value due to improper handling of type size and count in the AMQP 0-8/0-9/0-9-1 decoder. ...
Uncontrolled Recursion
Overview org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol is an AMQP 0-8, 0-9 and 0-9-1 protocol broker plug-in. Affected versions of this package are vulnerable to Uncontrolled Recursion through unbounded nesting of types in the field-table processing. An attacker can cause a stack overflow...
CVE-2026-92550 Apache Qpid Broker-J: Type size/count handling can lead to excessive allocation pre-authentication in the AMQP 0-8/0-9/0-9-1 decoder
A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects Apache Qpid Broker-J: through 10.1.0. Users are recommended to upgrade to version 10.1.1, which fixes the issue...
CVE-2026-92550 Apache Qpid Broker-J: Type size/count handling can lead to excessive allocation pre-authentication in the AMQP 0-8/0-9/0-9-1 decoder
A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects Apache Qpid Broker-J: through 10.1.0. Users are recommended to upgrade to version 10.1.1, which fixes the issue...
CVE-2026-92550 Apache Qpid Broker-J: Type size/count handling can lead to excessive allocation pre-authentication in the AMQP 0-8/0-9/0-9-1 decoder
A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects Apache Qpid Broker-J: through 10.1.0. Users are recommended to upgrade to version 10.1.1, which fixes the issue...
CVE-2026-92550
The Apache Qpid Broker-J software (versions through 10.1.0 ) is vulnerable to a denial of service (DoS) attack. A pre-authentication attacker can exploit improper type size/count handling within the AMQP 0-8/0-9/0-9-1 decoder to trigger excessive memory allocation. To mitigate this risk, users sh...
CVE-2026-92564 Apache Qpid Broker-J: Unbounded type nesting can lead to stack overflow pre-authentication in AMQP 0-8/0-9/0-9-1 field-table processing
A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qpid Broker-J: through 10.1.0. Users are recommended to upgrade to version 10.1.1, which fixes the issue...
CVE-2026-92564 Apache Qpid Broker-J: Unbounded type nesting can lead to stack overflow pre-authentication in AMQP 0-8/0-9/0-9-1 field-table processing
A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qpid Broker-J: through 10.1.0. Users are recommended to upgrade to version 10.1.1, which fixes the issue...
CVE-2026-92564
The Apache Qpid Broker-J (versions through 10.1.0 ) is vulnerable to a Denial of Service (DoS) condition via unbounded type nesting . An unauthenticated remote attacker can send specially crafted messages containing deeply nested data structures during AMQP 0-8/0-9/0-9-1 field-table processing. B...
CVE-2026-92564 Apache Qpid Broker-J: Unbounded type nesting can lead to stack overflow pre-authentication in AMQP 0-8/0-9/0-9-1 field-table processing
A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qpid Broker-J: through 10.1.0. Users are recommended to upgrade to version 10.1.1, which fixes the issue...
CVE-2019-0200: Undefined Security Weakness
A Denial of Service vulnerability was found in Apache Qpid Broker-J versions 6.0.0-7.0.6 inclusive and 7.1.0 which allows an unauthenticated attacker to crash the broker instance by sending specially crafted commands using AMQP protocol versions below 1.0 AMQP 0-8, 0-9, 0-91 and 0-10. Users of...
com.confluex:qpid-in-a-can (0.2.0), org.apache.qpid:qpid-bdbstore (0.24) +14 more potentially affected by CVE-2016-4432 via org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol (0.24)
org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol MAVEN version 0.24 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol and may be impacted: - com.confluex:qpid-in-a-can 0.2.0 -...
io.relayr:rabbitmq-scala-client_2.10 (>=0.1, <=0.1.1), io.relayr:rabbitmq-scala-client_2.11 (>=0.1, <=0.1.1) +5 more potentially affected by CVE-2016-4432 via org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol (0.30)
org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol MAVEN version 0.30 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol and may be impacted: - io.relayr:rabbitmq-scala-client2.10 =0.1, =0.1, =0.1.1...
io.snamp.features:wrapped-libs-for-tests (2.0.0), org.apache.qpid:qpid-bdbstore (0.32) +4 more potentially affected by CVE-2016-4432 via org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol (0.32)
org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol MAVEN version 0.32 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol and may be impacted: - io.snamp.features:wrapped-libs-for-tests 2.0.0 -...
org.apache.qpid:qpid-bdbstore (>=6.0.0, <=6.0.2), org.apache.qpid:qpid-bdbstore-jmx (>=6.0.0, <=6.0.2) +3 more potentially affected by CVE-2016-4432 via org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol (>=6.0.0, <=6.0.2)
org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.2 Source cves: CVE-2016-4432 Source advisory: OSV:GHSA-Q66C-H853-GQW2...
org.apache.qpid:qpid-bdbstore (>=6.0.0, <=6.0.2), org.apache.qpid:qpid-bdbstore-jmx (>=6.0.0, <=6.0.2) +3 more potentially affected by CVE-2016-4432 via org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol (>=6.0.0, <=6.0.2)
org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.2 Source cves: CVE-2016-4432 Source advisory: GHSA-Q66C-H853-GQW2...
CVE-2016-4432
The AMQP 0-8, 0-9, 0-91, and 0-10 connection handling in Apache Qpid Java before 6.0.3 might allow remote attackers to bypass authentication and consequently perform actions via vectors related to connection state logging...
