Description
The AMQP 0-8, 0-9, 0-91, and 0-10 connection handling in Apache Qpid Java before 6.0.3 might allow remote attackers to bypass authentication and consequently perform actions via vectors related to connection state logging.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 16.04 LTS | qpid-cpp | No fix yet | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol | < 6.0.3 | 6.0.3 | GHSA-q66c-h853-gqw2 |
| Maven | org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol | < 6.0.3 | 6.0.3 | GHSA-q66c-h853-gqw2 |
References
- 20160527 [CVE-2016-4432] Apache Qpid Java Broker - authentication bypass mailing-list
- 1035983 vdb-entry
- https://svn.apache.org/viewvc?view=revision&revision=1743393
- https://svn.apache.org/viewvc?view=revision&revision=1743161
- http://packetstormsecurity.com/files/137216/Apache-Qpid-Java-Broker-6.0.2-Authentication-Bypass.html
- [qpid-users] 20160527 [CVE-2016-4432] Apache Qpid Java Broker - authentication bypass mailing-list
- https://issues.apache.org/jira/browse/QPID-7257