CVE-2015-5164: Pulpproject Qpid

High severity, CVSS 7.2. EPSS: 4% chance of exploitation in the next 30 days.

The Qpid server on Red Hat Satellite 6 does not properly restrict message types, which allows remote authenticated users with administrative access on a managed content host to execute arbitrary code via a crafted message, related to a pickle processing problem in pulp.

Affected products

• Pulpproject Qpid: affected versions not specified

Published 2017-10-18. Last modified 2026-06-17.