Skip to content
OpenAdvisories

Package · Maven

org.apache.qpid:qpid-broker

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2017-15701

    Apache Qpid Broker-J vulnerable to Denial of Service (DoS) via uncontrolled resource consumption

    In Apache Qpid Broker-J versions 6.1.0 through 6.1.4 (inclusive) the broker does not properly enforce a maximum frame size in AMQP 1.0 frames. A remote unauthenticated attacker could exploit this to cause the broker to exhaust all available memory and eventua…

    Apache Software Foundation Apache Qpid Broker-J org.apache.qpid:qpid-broker Maven
  • High 7.5
    CVE-2016-8741

    Exposure of Sensitive Information to an Unauthorized Actor in Apache Qpid Broker for Java

    The Apache Qpid Broker for Java can be configured to use different so called AuthenticationProviders to handle user authentication. Among the choices are the SCRAM-SHA-1 and SCRAM-SHA-256 AuthenticationProvider types. It was discovered that these Authenticati…

    Apache Software Foundation Apache Qpid Broker-J org.apache.qpid:qpid-broker Maven