Ubuntu.comUB:CVE-2012-4459CVE-2012-4459
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.01 Low
EPSS
Percentile
83.6%
Integer overflow in the qpid::framing::Buffer::checkAvailable function in
Apache Qpid 0.20 and earlier allows remote attackers to cause a denial of
service (crash) via a crafted message, which triggers an out-of-bounds
read.
References
issues.apache.org/jira/browse/QPID-4629?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel
launchpad.net/bugs/cve/CVE-2012-4459
nvd.nist.gov/vuln/detail/CVE-2012-4459
rhn.redhat.com/errata/RHSA-2013-0561.html
security-tracker.debian.org/tracker/CVE-2012-4459
www.cve.org/CVERecord?id=CVE-2012-4459
Related
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.01 Low
EPSS
Percentile
83.6%