Denial Of Service (DoS)

2019-01-1508:57:34

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.01 Low

EPSS

Percentile

83.5%

JSON

qpid is vulnerable to denial of service (DoS) attacks. The vulnerability exists as Apache Qpid 0.17 and earlier does not properly restrict incoming client connections, which allows remote attackers to cause a denial of service (file descriptor consumption) via a large number of incomplete connections.

CPENameOperatorVersion
qpid-qmfeq0.14__9.el5
qpid-qmfeq0.10__6.el6
qpid-qmfeq0.10__11.el5
qpid-qmfeq0.10__10.el6
qpid-qmfeq0.10__10.el5
qpid-qmfeq0.12__6.el6
qpid-qmfeq0.14__7.el6_2
qpid-toolseq0.10__5.el6
qpid-toolseq0.12__2.el6
qpid-toolseq0.10__3.el6

Name	Operator	Version
qpid-qmf	eq	0.14__9.el5
qpid-qmf	eq	0.10__6.el6
qpid-qmf	eq	0.10__11.el5
qpid-qmf	eq	0.10__10.el6
qpid-qmf	eq	0.10__10.el5
qpid-qmf	eq	0.12__6.el6
qpid-qmf	eq	0.14__7.el6_2
qpid-tools	eq	0.10__5.el6
qpid-tools	eq	0.12__2.el6
qpid-tools	eq	0.10__3.el6