Apache Qpid 0.17 and earlier does not properly restrict incoming client connections, which allows remote attackers to cause a denial of service (file descriptor consumption) via a large number of incomplete connections.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade qpid-cpp-clientUpgrade rh-qpid-cpp-testsUpgrade qpid-qmf-develUpgrade qpid-cpp-client-rdmaUpgrade qpid-cpp-server-sslUpgrade qpid-cpp-client-devel-docsUpgrade qpid-cpp-serverUpgrade qpid-cpp-server-storeUpgrade qpid-cpp-server-develUpgrade python-qpid-qmfUpgrade qpid-cpp-server-clusterUpgrade qpid-cpp-client-develUpgrade qpid-qmfUpgrade qpid-cpp-server-rdmaUpgrade qpid-cpp-client-sslUpgrade python-qpidUpgrade qpid-toolsUpgrade qpid-cpp-server-xmlUpgrade ruby-qpid-qmf | Dec 1, 2016 | Sep 28, 2012 |
| Oracle_linux | — | Upgrade qpid-toolsUpgrade python-qpidUpgrade ruby-qpid-qmfUpgrade qpid-cpp-client-sslUpgrade qpid-cpp-clientUpgrade qpid-cpp-server-sslUpgrade python-qpid-qmfUpgrade qpid-cpp-serverUpgrade qpid-qmf | Oct 16, 2024 | Sep 28, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub