Apache Qpid 0.17 and earlier does not properly restrict incoming client connections, which allows remote attackers to cause a denial of service (file descriptor consumption) via a large number of incomplete connections.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade qpid-cpp-server-rdmaUpgrade qpid-cpp-client-sslUpgrade qpid-toolsUpgrade ruby-qpid-qmfUpgrade qpid-cpp-server-xmlUpgrade python-qpidUpgrade qpid-cpp-clientUpgrade qpid-cpp-server-clusterUpgrade python-qpid-qmfUpgrade qpid-cpp-client-develUpgrade qpid-qmf-develUpgrade qpid-cpp-server-develUpgrade qpid-cpp-server-sslUpgrade qpid-cpp-client-rdmaUpgrade qpid-qmfUpgrade rh-qpid-cpp-testsUpgrade qpid-cpp-client-devel-docsUpgrade qpid-cpp-server-storeUpgrade qpid-cpp-server | Dec 1, 2016 | Sep 28, 2012 |
| Oracle_linux | — | Upgrade ruby-qpid-qmfUpgrade qpid-cpp-client-sslUpgrade python-qpidUpgrade qpid-toolsUpgrade python-qpid-qmfUpgrade qpid-qmfUpgrade qpid-cpp-serverUpgrade qpid-cpp-clientUpgrade qpid-cpp-server-ssl | Oct 16, 2024 | Sep 28, 2012 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub