CVEvulnerability
CVE-2012-4458
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-03-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-189
Description
The AMQP type decoder in Apache Qpid 0.20 and earlier allows remote attackers to cause a denial of service (memory consumption and server crash) via a large number of zero width elements in the client-properties map in a connection.start-ok message.
Affected configurations
• apache qpid (<= 0.20)
• apache qpid 0.5
• apache qpid 0.6
• apache qpid 0.7
• apache qpid 0.8
• apache qpid 0.9
• apache qpid 0.10
• apache qpid 0.11
• apache qpid 0.12
• apache qpid 0.13
• apache qpid 0.14
• apache qpid 0.15
• apache qpid 0.16
• apache qpid 0.17
• apache qpid 0.18
• apache qpid 0.19
Related
Weakness · not in database (1)
References
- http://rhn.redhat.com/errata/RHSA-2013-0561.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2013-0562.html rhn.redhat.com
- http://secunia.com/advisories/52516 Vendor Advisory
- http://svn.apache.org/viewvc?view=revision&revision=1453031 Patch
- https://bugzilla.redhat.com/show_bug.cgi?id=861234 bugzilla.redhat.com
- https://issues.apache.org/jira/browse/QPID-4629 issues.apache.org
- https://issues.apache.org/jira/issues/?jql=fixVersion%20%3D%20%220.21%22%20AND%20project%20%3D%20QPID issues.apache.org
- http://rhn.redhat.com/errata/RHSA-2013-0561.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2013-0562.html rhn.redhat.com
- http://secunia.com/advisories/52516 Vendor Advisory
- http://svn.apache.org/viewvc?view=revision&revision=1453031 Patch
- https://bugzilla.redhat.com/show_bug.cgi?id=861234 bugzilla.redhat.com
- https://issues.apache.org/jira/browse/QPID-4629 issues.apache.org
- https://issues.apache.org/jira/issues/?jql=fixVersion%20%3D%20%220.21%22%20AND%20project%20%3D%20QPID issues.apache.org