CVE-2015-0203

qpid-cpp: 3 qpidd DoS issues in AMQP 0-10 protocol handling

Published Feb 21, 2018 CVSS 3.0 · 6.5 Medium EPSS 8.5% KEV · Not listed
Description
The qpidd broker in Apache Qpid 0.30 and earlier allows remote authenticated users to cause a denial of service (daemon crash) via an AMQP message with (1) an invalid range in a sequence set, (2) content-bearing methods other than message-transfer, or (3) a session-gap control before a corresponding session-attach.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 6, 2024, 4:03 AM
Reserved
Nov 18, 2014, 12:00 AM
Status
Modified
Published
Feb 21, 2018, 3:29 PM
Modified
Jun 17, 2026, 12:19 AM
Severity
Moderate
Public date
Jan 13, 2015, 12:00 AM