Apache Qpid 0.17 and earlier does not properly restrict incoming client connections, which allows remote attackers to cause a denial of service (file descriptor consumption) via a large number of incomplete connections.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade python-qpidUpgrade qpid-cpp-server-rdmaUpgrade qpid-toolsUpgrade qpid-cpp-client-sslUpgrade qpid-cpp-server-xmlUpgrade ruby-qpid-qmfUpgrade qpid-cpp-serverUpgrade qpid-cpp-client-devel-docsUpgrade qpid-qmfUpgrade qpid-cpp-server-storeUpgrade qpid-cpp-server-clusterUpgrade qpid-cpp-client-develUpgrade python-qpid-qmfUpgrade rh-qpid-cpp-testsUpgrade qpid-qmf-develUpgrade qpid-cpp-server-develUpgrade qpid-cpp-client-rdmaUpgrade qpid-cpp-clientUpgrade qpid-cpp-server-ssl | Dec 1, 2016 | Sep 28, 2012 |
| Oracle_linux | — | Upgrade qpid-toolsUpgrade ruby-qpid-qmfUpgrade python-qpidUpgrade qpid-cpp-client-sslUpgrade qpid-cpp-server-sslUpgrade python-qpid-qmfUpgrade qpid-cpp-clientUpgrade qpid-qmfUpgrade qpid-cpp-server | Oct 16, 2024 | Sep 28, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub