CVE-2009-5006

Apache Qpid's broker (C++ SessionAdapter::ExchangeHandlerImpl::checkAlternate) before version 0.6, used in Red Hat Enterprise MRG before 1.3, is affected. A remote authenticated user can trigger a NULL pointer dereference by attempting to redeclare an existing exchange while adding an alternate e...

CVE-2010-3083

The CVE-2010-3083 issue affects Red Hat Enterprise MRG Messaging (qpidd) when SSL is enabled. A flaw in how the SSL port is handled allows a remote attacker to cause a denial-of-service (daemon outage) by connecting to the SSL port without completing the SSL handshake. The vulnerability is addres...

CVE-2014-3629

The CVE-2014-3629 issue affects Apache Qpid’s qpidd with the XML Exchange module up to and including version 0.30. On parsing a message containing an XML body with a DTD, the broker may retrieve external entities, potentially causing the broker to initiate outgoing HTTP connections. Public refere...