Skip to content
OpenAdvisories
Unscored CVE-2009-5004 EUVD-2009-4966GHSA-754m-jwrw-2j28

qpid-cpp 1.0 crashes when a large message is sent and the Digest-MD5 mechanism with a security layer is in use .

Published Nov 9, 2019 · Updated Aug 7, 2024 · Assigned by redhat

Description

qpid-cpp 1.0 crashes when a large message is sent and the Digest-MD5 mechanism with a security layer is in use .

Affected products

VendorProductAffectedFixed
qpid-cpp qpid-cpp 1.0 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Red Hat MRG 1 classads +2 1.0.4-1.el5 RHEA-2009:1633
Red Hat MRG 1 condor +3 7.4.1-0.7.el5 RHEA-2009:1633
Red Hat MRG 1 condor-ec2-enhanced 1.0-18.el5 RHEA-2009:1633
Red Hat MRG 1 condor-ec2-enhanced-hooks +1 1.0-19.el5 RHEA-2009:1633
Red Hat MRG 1 condor-job-hooks +1 1.0-13.el5 RHEA-2009:1633
Red Hat MRG 1 condor-low-latency 1.0-21.el5 RHEA-2009:1633
Red Hat MRG 1 condor-remote-configuration +1 1.0-23.el5 RHEA-2009:1633
Red Hat MRG 1 mrg-grid-docs 1.2-1.el5 RHEA-2009:1633
Red Hat MRG 1 python-qpid 0.5.752581-4.el5 RHEA-2009:1633
Red Hat MRG 1 qmf +13 0.5.752581-34.el5 RHEA-2009:1633
Red Hat MRG 1 qpid-java +3 0.5.751061-9.el5 RHEA-2009:1633
Red Hat MRG 1 rhm 0.5.3206-27.el5 RHEA-2009:1633
Red Hat MRG 1 rhm-docs 0.5.756148-2.el5 RHEA-2009:1633
Red Hat MRG 1 sesame 0.4.3153-2.el5 RHEA-2009:1633

Advisories 1

References