Описание
qpidd in Apache Qpid 0.30 and earlier allows remote attackers to cause a denial of service (daemon crash) via a crafted protocol sequence set. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-0203.
A flaw was found in the way the Qpid daemon (qpidd) processed certain protocol sequences. An unauthenticated attacker able to send a specially crafted protocol sequence set that could use this flaw to crash qpidd.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | qpid-cpp | Will not fix | ||
| Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7 | qpid-cpp | Will not fix | ||
| MRG for RHEL-5 v. 2 | qpid-cpp-mrg | Fixed | RHSA-2015:0662 | 09.03.2015 |
| MRG for RHEL-6 v.3 | python-qpid | Fixed | RHSA-2015:0707 | 19.03.2015 |
| MRG for RHEL-6 v.3 | qpid-cpp | Fixed | RHSA-2015:0707 | 19.03.2015 |
| MRG for RHEL-6 v.3 | qpid-qmf | Fixed | RHSA-2015:0707 | 19.03.2015 |
| MRG Messaging v.3 for RHEL-7 | libdb | Fixed | RHSA-2015:0708 | 19.03.2015 |
| MRG Messaging v.3 for RHEL-7 | python-qpid | Fixed | RHSA-2015:0708 | 19.03.2015 |
| MRG Messaging v.3 for RHEL-7 | qpid-cpp | Fixed | RHSA-2015:0708 | 19.03.2015 |
| MRG Messaging v.3 for RHEL-7 | qpid-qmf | Fixed | RHSA-2015:0708 | 19.03.2015 |
Показывать по
Дополнительная информация
Статус:
EPSS
2.9 Low
CVSS2
Связанные уязвимости
qpidd in Apache Qpid 0.30 and earlier allows remote attackers to cause a denial of service (daemon crash) via a crafted protocol sequence set. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-0203.
qpidd in Apache Qpid 0.30 and earlier allows remote attackers to cause a denial of service (daemon crash) via a crafted protocol sequence set. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-0203.
qpidd in Apache Qpid 0.30 and earlier allows remote attackers to cause ...
qpidd in Apache Qpid 0.30 and earlier allows remote attackers to cause a denial of service (daemon crash) via a crafted protocol sequence set. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-0203.
EPSS
2.9 Low
CVSS2