CVE-2026-115942

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-115942", "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09", "state": "PUBLISHED", "assignerShortName": "apache", "dateReserved": "2026-10-23T21:59:47.705Z", "datePublished": "2026-10-29T10:19:58.757Z", "dateUpdated": "2026-11-05T21:31:02.254Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09", "shortName": "apache", "dateUpdated": "2026-10-29T10:19:58.757Z"}, "title": "Apache Qpid Proton C: Verifying non compliant TLS wildcard cert can cause stack buffer overflow read", "problemTypes": [{"descriptions": [{"description": "CWE-125 Out-of-bounds read", "lang": "en", "cweId": "CWE-125", "type": "CWE"}]}], "source": {"defect": ["PROTON-2974"], "discovery": "EXTERNAL"}, "affected": [{"vendor": "Apache Software Foundation", "product": "Apache Qpid Proton C", "packageURL": "pkg:software-id/apache.org/qpid-proton", "versions": [{"status": "affected", "version": "0", "lessThanOrEqual": "0.40.0", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"value": "A misconfigured wildcard TLS certificate causes a stack read overflow.\n\n\n\nThis issue does not affect any wildcard certificate issued to the RFC9525 standard - the fix only accepts certificates that comply to this standard.\n\n\n\nThis issue affects Apache Qpid Proton C: through 0.40.0.\n\n\n\nUsers are recommended to upgrade to version 0.41.1, which fixes the issue.", "lang": "en", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>A misconfigured wildcard TLS certificate causes a stack read overflow.</p><p>This issue does not affect any wildcard certificate issued to the RFC9525 standard - the fix only accepts certificates that comply to this standard.</p><p>This issue affects Apache Qpid Proton C: through 0.40.0.</p><p>Users are recommended to upgrade to version 0.41.1, which fixes the issue.</p>"}]}], "references": [{"url": "https://lists.apache.org/thread.html/5z8x4c1939rxs5hod7q7gvgdmjd7p7pt", "tags": ["vendor-advisory"]}], "metrics": [{"other": {"type": "Textual description of severity", "content": {"text": "low"}}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "credits": [{"lang": "en", "value": "zhangph@yandex.com", "type": "finder"}], "x_generator": {"engine": "Vulnogram 1.0.3"}}, "adp": [{"title": "CVE Program Container", "references": [{"url": "http://www.openwall.com/lists/oss-security/2026/10/28/25"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2026-10-29T11:09:37.028Z"}}, {"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-11-05T21:30:42.410802Z", "id": "CVE-2026-115942", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-05T21:31:02.254Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "http://www.openwall.com/lists/oss-security/2026/10/28/25"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2026-10-29T11:09:37.028Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2026-115942", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-11-05T21:30:42.410802Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-05T21:30:56.139Z"}}], "cna": {"title": "Apache Qpid Proton C: Verifying non compliant TLS wildcard cert can cause stack buffer overflow read", "source": {"defect": ["PROTON-2974"], "discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "finder", "value": "zhangph@yandex.com"}], "metrics": [{"other": {"type": "Textual description of severity", "content": {"text": "low"}}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Apache Software Foundation", "product": "Apache Qpid Proton C", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "0.40.0"}], "packageURL": "pkg:software-id/apache.org/qpid-proton", "defaultStatus": "unaffected"}], "references": [{"url": "https://lists.apache.org/thread.html/5z8x4c1939rxs5hod7q7gvgdmjd7p7pt", "tags": ["vendor-advisory"]}], "x_generator": {"engine": "Vulnogram 1.0.3"}, "descriptions": [{"lang": "en", "value": "A misconfigured wildcard TLS certificate causes a stack read overflow.\n\n\n\nThis issue does not affect any wildcard certificate issued to the RFC9525 standard - the fix only accepts certificates that comply to this standard.\n\n\n\nThis issue affects Apache Qpid Proton C: through 0.40.0.\n\n\n\nUsers are recommended to upgrade to version 0.41.1, which fixes the issue.", "supportingMedia": [{"type": "text/html", "value": "<p>A misconfigured wildcard TLS certificate causes a stack read overflow.</p><p>This issue does not affect any wildcard certificate issued to the RFC9525 standard - the fix only accepts certificates that comply to this standard.</p><p>This issue affects Apache Qpid Proton C: through 0.40.0.</p><p>Users are recommended to upgrade to version 0.41.1, which fixes the issue.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-125", "description": "CWE-125 Out-of-bounds read"}]}], "providerMetadata": {"orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09", "shortName": "apache", "dateUpdated": "2026-10-29T10:19:58.757Z"}}}, "cveMetadata": {"cveId": "CVE-2026-115942", "state": "PUBLISHED", "dateUpdated": "2026-11-05T21:31:02.254Z", "dateReserved": "2026-10-23T21:59:47.705Z", "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09", "datePublished": "2026-10-29T10:19:58.757Z", "assignerShortName": "apache"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "packageURL": "pkg:software-id/apache.org/qpid-proton", "product": "Apache Qpid Proton C", "vendor": "Apache Software Foundation", "versions": [{"lessThanOrEqual": "0.40.0", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@apache.org"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A misconfigured wildcard TLS certificate causes a stack read overflow.\n\n\n\nThis issue does not affect any wildcard certificate issued to the RFC9525 standard - the fix only accepts certificates that comply to this standard.\n\n\n\nThis issue affects Apache Qpid Proton C: through 0.40.0.\n\n\n\nUsers are recommended to upgrade to version 0.41.1, which fixes the issue."}], "id": "CVE-2026-115942", "lastModified": "2026-11-05T22:17:47.963", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-115942", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-11-05T21:30:42.410802Z", "version": "2.0.3"}}]}, "published": "2026-10-29T11:17:30.837", "references": [{"source": "security@apache.org", "url": "https://lists.apache.org/thread.html/5z8x4c1939rxs5hod7q7gvgdmjd7p7pt"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.openwall.com/lists/oss-security/2026/10/28/25"}], "sourceIdentifier": "security@apache.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-125"}], "source": "security@apache.org", "type": "Secondary"}]}

{"bugzilla": {"description": "qpid-proton: qpid-proton: Denial of Service via misconfigured wildcard TLS certificate", "id": "2563305", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2563305"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.9", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-125", "details": ["A misconfigured wildcard TLS certificate causes a stack read overflow.\nThis issue does not affect any wildcard certificate issued to the RFC9525 standard - the fix only accepts certificates that comply to this standard.\nThis issue affects Apache Qpid Proton C: through 0.40.0.\nUsers are recommended to upgrade to version 0.41.1, which fixes the issue.", "A flaw was found in Apache Qpid Proton. When processing a misconfigured wildcard TLS (Transport Layer Security) certificate that does not comply with standard specifications, the application triggers an out-of-bounds read on the stack. A remote attacker could exploit this vulnerability by presenting a non-compliant certificate during a TLS handshake, leading to an application crash and a denial of service (DoS), or potentially exposing sensitive memory."], "name": "CVE-2026-115942", "public_date": "2026-10-29T10:19:58Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-115942\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-115942\nhttps://lists.apache.org/thread.html/5z8x4c1939rxs5hod7q7gvgdmjd7p7pt"], "statement": "This vulnerability is rated Moderate because successful exploitation requires a non-standard wildcard TLS certificate that does not conform to RFC 9525, limiting exposure in environments using compliant public or private certificate authorities. While an attacker could attempt to trigger an out-of-bounds stack read during TLS negotiation, the primary consequence is an application crash leading to denial of service rather than remote code execution. Under typical Red Hat product deployments, standard validation practices and conformant certificates significantly reduce the likelihood of this condition being encountered.", "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,0.40.0]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "Apache Qpid Proton C", "source": "cna", "vendor": "Apache Software Foundation"}, "product": "qpid_proton-c", "vendor": "apache"}], "created": "2026-10-29T11:30:14.464162+00:00", "updated": "2026-11-06T00:00:21.493700+00:00", "vendors": ["apache", "apache$PRODUCT$qpid_proton-c"]}