CVE-2012-2145 Apache Qpid 0.17 and earlier does not properly restrict incoming client connections, which allows remote attackers to cause a denial of service (file descriptor consumption) via a large number of inco...
MediumCVSS 5.0
EPSS 4.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Apache Qpid 0.17 and earlier does not properly restrict incoming client connections, which allows remote attackers to cause a denial of service (file descriptor consumption) via a large number of incomplete connections.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apache qpid | <= 0.17 | No fix listed |
| apache qpid | = 0.6 | No fix listed |
| apache qpid | = 0.7 | No fix listed |
| apache qpid | = 0.8 | No fix listed |
| apache qpid | = 0.9 | No fix listed |
| apache qpid | = 0.10 | No fix listed |
| apache qpid | = 0.12 | No fix listed |
| apache qpid | = 0.14 | No fix listed |
| apache qpid | = 0.16 | No fix listed |
References
- RHSA-2012:1269 vendor-advisory
- RHSA-2012:1277 vendor-advisory
- 50573 third-party-advisory vendor-advisory
- 50698 third-party-advisory vendor-advisory
- 50699 third-party-advisory vendor-advisory
- 55608 vdb-entry
- bugzilla.redhat.com
- apache-qpid-broker-dos(78730) vdb-entry
- issues.apache.org
- issues.apache.org