CVE-2015-0203 The qpidd broker in Apache Qpid 0.30 and earlier allows remote authenticated users to cause a denial of service (daemon crash) via an AMQP message with (1) an invalid range in a sequence set, (2) cont...
MediumCVSS 6.5
EPSS 8.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The qpidd broker in Apache Qpid 0.30 and earlier allows remote authenticated users to cause a denial of service (daemon crash) via an AMQP message with (1) an invalid range in a sequence set, (2) content-bearing methods other than message-transfer, or (3) a session-gap control before a corresponding session-attach.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apache qpid | <= 0.30 | No fix listed |
References
- 72030 third-party-advisory vdb-entry
- RHBA-2016:1500 third-party-advisory vendor-advisory
- issues.apache.org issue-tracking vendor-advisory
- packetstormsecurity.com third-party-advisory vdb-entry