Описание
In Apache Qpid Broker-J versions 6.1.0 through 6.1.4 (inclusive) the broker does not properly enforce a maximum frame size in AMQP 1.0 frames. A remote unauthenticated attacker could exploit this to cause the broker to exhaust all available memory and eventually terminate. Older AMQP protocols are not affected.
Ссылки
- Third Party AdvisoryVDB Entry
- Issue TrackingVendor Advisory
- MitigationVendor Advisory
- Third Party AdvisoryVDB Entry
- Issue TrackingVendor Advisory
- MitigationVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 6.1.0 (включая) до 6.1.4 (включая)
cpe:2.3:a:apache:qpid_broker-j:*:*:*:*:*:*:*:*
EPSS
Процентиль: 84%
0.02276
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-400
Связанные уязвимости
CVSS3: 7.5
debian
около 8 лет назад
In Apache Qpid Broker-J versions 6.1.0 through 6.1.4 (inclusive) the b ...
CVSS3: 7.5
github
больше 7 лет назад
Apache Qpid Broker-J vulnerable to Denial of Service (DoS) via uncontrolled resource consumption
EPSS
Процентиль: 84%
0.02276
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-400