K23675185: Apache Qpid vulnerabilities CVE-2016-3094 and CVE-2016-4432

Security Advisory Description CVE-2016-3094 PlainSaslServer.java in Apache Qpid Java before 6.0.3, when the broker is configured to allow plaintext passwords, allows remote attackers to cause a denial of service broker termination via a crafted authentication attempt, which triggers an uncaught...

com.confluex:qpid-in-a-can (=0.2.0), com.dell.cpsd.common.messaging:common-testing (=1.5.0) +22 more potentially affected by CVE-2016-3094 via org.apache.qpid:qpid-broker (>=0.14 <=10.0.1)

org.apache.qpid:qpid-broker MAVEN version =0.14, =2.0.0, =1.0.0, =0.1, =0.1, =10.0.0, =0.14, =0.18, =0.18, =0.24 - org.apache.qpid:qpid-broker-plugins-amqp-0-10-protocol =0.24 - org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol =0.24 - org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol =0....

SOL23675185 - Apache Qpid vulnerabilities CVE-2016-3094 and CVE-2016-4432

Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...

CVE-2016-3094

PlainSaslServer.java in Apache Qpid Java before 6.0.3, when the broker is configured to allow plaintext passwords, allows remote attackers to cause a denial of service broker termination via a crafted authentication attempt, which triggers an uncaught exception...

CVE-2016-3094

CVE-2016-3094 - Affected software and root cause: Apache Qpid Java broker prior to 6.0.3, when configured to allow plaintext passwords, is vulnerable via the PlainSaslServer.java authentication path. An attacker can trigger an uncaught exception through a crafted authentication attempt, leading t...

CVE-2016-3094

PlainSaslServer.java in Apache Qpid Java before 6.0.3, when the broker is configured to allow plaintext passwords, allows remote attackers to cause a denial of service broker termination via a crafted authentication attempt, which triggers an uncaught exception...