Denial Of Service (DoS0

2019-01-1509:04:49

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.368 Low

EPSS

Percentile

97.2%

JSON

qpid-cpp-mrg is vulnerable to denial of service (DoS) attacks. The vulnerability exists as the qpidd broker in Apache Qpid 0.30 and earlier allows remote authenticated users to cause a denial of service (daemon crash) via an AMQP message with (1) an invalid range in a sequence set, (2) content-bearing methods other than message-transfer, or (3) a session-gap control before a corresponding session-attach.

CPENameOperatorVersion
qpid-cpp-mrgeq0.18__17.el5_9
qpid-cpp-mrgeq0.18__18.el5_9
qpid-cpp-mrgeq0.18__20.el5_10
qpid-cpp-mrgeq0.14__22.el5
qpid-cpp-mrgeq0.18__36.el5_10
qpid-cpp-mrgeq0.18__25.el5_10
qpid-cpp-mrgeq0.14__14.el5
qpid-cpp-mrgeq0.7.946106__22.el5
qpid-cpp-mrgeq0.18__35.el5_10
qpid-cpp-mrgeq0.10__9.el5

Name	Operator	Version
qpid-cpp-mrg	eq	0.18__17.el5_9
qpid-cpp-mrg	eq	0.18__18.el5_9
qpid-cpp-mrg	eq	0.18__20.el5_10
qpid-cpp-mrg	eq	0.14__22.el5
qpid-cpp-mrg	eq	0.18__36.el5_10
qpid-cpp-mrg	eq	0.18__25.el5_10
qpid-cpp-mrg	eq	0.14__14.el5
qpid-cpp-mrg	eq	0.7.946106__22.el5
qpid-cpp-mrg	eq	0.18__35.el5_10
qpid-cpp-mrg	eq	0.10__9.el5