CVE-2009-5005

qpid: crash on receipt of invalid AMQP data

Published Oct 18, 2010 CVSS 2.0 · 5.0 Medium EPSS 5.9% KEV · Not listed
Description
The Cluster::deliveredEvent function in cluster/Cluster.cpp in Apache Qpid, as used in Red Hat Enterprise MRG before 1.3 and other products, allows remote attackers to cause a denial of service (daemon crash and cluster outage) via invalid AMQP data.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2009-4967 The Cluster::deliveredEvent function in cluster/Cluster.cpp in Apache Qpid, as used in Red Hat Enterprise MRG before 1.3 and other products, allows remote attackers to cause a denial of service (daemon crash and cluster outage) via invalid AMQP data.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 7, 2024, 7:24 AM
Reserved
Oct 12, 2010, 12:00 AM
Status
Modified
Published
Oct 18, 2010, 5:00 PM
Modified
Jun 16, 2026, 11:14 PM
Severity
Moderate
Public date
Jun 17, 2009, 12:00 AM