CVE-2012-4460 The serializing/deserializing functions in the qpid::framing::Buffer class in Apache Qpid 0.20 and earlier allow remote attackers to cause a denial of service (assertion failure and daemon exit) via u...
MediumCVSS 5.0
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The serializing/deserializing functions in the qpid::framing::Buffer class in Apache Qpid 0.20 and earlier allow remote attackers to cause a denial of service (assertion failure and daemon exit) via unspecified vectors. NOTE: this issue could also trigger an out-of-bounds read, but it might not trigger a crash.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apache qpid | <= 0.20 | No fix listed |
| apache qpid | = 0.5 | No fix listed |
| apache qpid | = 0.6 | No fix listed |
| apache qpid | = 0.7 | No fix listed |
| apache qpid | = 0.8 | No fix listed |
| apache qpid | = 0.9 | No fix listed |
| apache qpid | = 0.10 | No fix listed |
| apache qpid | = 0.11 | No fix listed |
| apache qpid | = 0.12 | No fix listed |
| apache qpid | = 0.13 | No fix listed |
| apache qpid | = 0.14 | No fix listed |
| apache qpid | = 0.15 | No fix listed |
| apache qpid | = 0.16 | No fix listed |
| apache qpid | = 0.17 | No fix listed |
| apache qpid | = 0.18 | No fix listed |
| apache qpid | = 0.19 | No fix listed |