Skip to content
OpenAdvisories

Package · Ubuntu

qpid-cpp

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

11 results · Feed

  • Unscored —
    CVE-2014-0212

    qpid-cpp: ACL policies only loaded if the acl-file option specified enabling DoS by consuming all available file descri…

    qpid-cpp qpid-cpp qpid-cpp Ubuntu
  • Unscored —
    CVE-2015-0203

    The qpidd broker in Apache Qpid 0.30 and earlier allows remote authenticated users to cause a denial of service (daemon…

    qpid-cpp Ubuntu
  • High 7.5
    CVE-2016-4974

    Improper Input Validation in Apache Qpid AMQP 0-x JMS

    Apache Qpid AMQP 0-x JMS client before 6.0.4 and JMS (AMQP 1.0) before 0.10.0 does not restrict the use of classes available on the classpath, which might allow remote authenticated users with permission to send messages to deserialize arbitrary objects and e…

    qpid-cpp org.apache.qpid:qpid-jms-client Ubuntu Maven
  • Critical 9.1
    CVE-2016-4432

    AMQP 0-8, 0-9, 0-91, and 0-10 connection handling in Apache Qpid Java before 6.0.3 might allow remote attackers to bypass authentication

    The AMQP 0-8, 0-9, 0-91, and 0-10 connection handling in Apache Qpid Java before 6.0.3 might allow remote attackers to bypass authentication and consequently perform actions via vectors related to connection state logging.

    qpid-cpp org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol Ubuntu Maven
  • Medium 5.9
    CVE-2016-3094

    Improper Input Validation in org.apache.qpid:qpid-broker

    PlainSaslServer.java in Apache Qpid Java before 6.0.3, when the broker is configured to allow plaintext passwords, allows remote attackers to cause a denial of service (broker termination) via a crafted authentication attempt, which triggers an uncaught excep…

    qpid-cpp org.apache.qpid:qpid-broker Ubuntu Maven
  • Unscored —
    CVE-2015-0223

    Unspecified vulnerability in Apache Qpid 0.30 and earlier allows remote attackers to bypass access restrictions on qpid…

    qpid-cpp Ubuntu
  • Unscored —
    CVE-2014-3629

    XML external entity (XXE) vulnerability in the XML Exchange module in Apache Qpid 0.30 allows remote attackers to cause…

    qpid-cpp Ubuntu
  • Unscored —
    CVE-2012-4460

    The serializing/deserializing functions in the qpid::framing::Buffer class in Apache Qpid 0.20 and earlier allow remote…

    qpid-cpp Ubuntu
  • Unscored —
    CVE-2012-4458

    The AMQP type decoder in Apache Qpid 0.20 and earlier allows remote attackers to cause a denial of service (memory cons…

    qpid-cpp Ubuntu
  • Unscored —
    CVE-2012-4459

    Integer overflow in the qpid::framing::Buffer::checkAvailable function in Apache Qpid 0.20 and earlier allows remote at…

    qpid-cpp Ubuntu
  • Medium —
    CVE-2012-4446

    Improper Authentication in Apache Qpid

    The default configuration for Apache Qpid 0.20 and earlier, when the federation_tag attribute is enabled, accepts AMQP connections without checking the source user ID, which allows remote attackers to bypass authentication and have other unspecified impact vi…

    qpid-cpp org.apache.qpid:qpid-client Ubuntu Maven