Red Hat Security Advisory: Red Hat Enterprise MRG Messaging 2.3 security update

Fixed packages 75

Vulnerabilities 3

• Medium —
  CVE-2012-4446

  Improper Authentication in Apache Qpid

  The default configuration for Apache Qpid 0.20 and earlier, when the federation_tag attribute is enabled, accepts AMQP connections without checking the source user ID, which allows remote attackers to bypass authentication and have other unspecified impact vi…

  qpid-cpp org.apache.qpid:qpid-client Ubuntu Maven
  Mar 12, 2013
• Unscored —
  CVE-2012-4458

  The AMQP type decoder in Apache Qpid 0.20 and earlier allows remote attackers to cause a denial of service (memory cons…

  qpid-cpp Ubuntu
  Mar 12, 2013
• Unscored —
  CVE-2012-4459

  Integer overflow in the qpid::framing::Buffer::checkAvailable function in Apache Qpid 0.20 and earlier allows remote at…

  qpid-cpp Ubuntu
  Mar 12, 2013

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• article
  https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_MRG/2/html/Technical_Notes/RHSA-2013-0562.html
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=851355
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=861234
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=861241
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0562.json
• report
  https://access.redhat.com/security/cve/CVE-2012-4446
• advisory
  https://www.cve.org/CVERecord?id=CVE-2012-4446
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2012-4446
• article
  https://issues.apache.org/jira/browse/QPID-4631
• report
  https://access.redhat.com/security/cve/CVE-2012-4458
• advisory
  https://www.cve.org/CVERecord?id=CVE-2012-4458
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2012-4458
• article
  https://issues.apache.org/jira/browse/QPID-4629
• report
  https://access.redhat.com/security/cve/CVE-2012-4459
• advisory
  https://www.cve.org/CVERecord?id=CVE-2012-4459
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2012-4459