Apache Qpid vulnerabilities

16 CVEs affecting Apache Qpid, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-0223, published 2019-04-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-0224, published 2017-10-30. High severity, CVSS 7.5. EPSS: 15.1% chance of exploitation in the next 30 days. qpidd in Apache Qpid 0.30 and earlier allows remote attackers to cause a denial of service (daemon crash) via a crafted protocol sequence set. NOTE: this vulnerability exists because of an…
CVE-2012-4459, published 2013-03-14. Medium severity, CVSS 5.0. EPSS: 9.2% chance of exploitation in the next 30 days. Integer overflow in the qpid::framing::Buffer::checkAvailable function in Apache Qpid 0.20 and earlier allows remote attackers to cause a denial of service (crash) via a crafted message, which…
CVE-2015-0203, published 2018-02-21. Medium severity, CVSS 6.5. EPSS: 8.5% chance of exploitation in the next 30 days. The qpidd broker in Apache Qpid 0.30 and earlier allows remote authenticated users to cause a denial of service (daemon crash) via an AMQP message with (1) an invalid range in a sequence set, (2)…
CVE-2014-3629, published 2014-11-17. Medium severity, CVSS 4.3. EPSS: 6.9% chance of exploitation in the next 30 days. XML external entity (XXE) vulnerability in the XML Exchange module in Apache Qpid 0.30 allows remote attackers to cause outgoing HTTP connections via a crafted message.
CVE-2015-0223, published 2015-02-02. Medium severity, CVSS 5.0. EPSS: 6.6% chance of exploitation in the next 30 days. Unspecified vulnerability in Apache Qpid 0.30 and earlier allows remote attackers to bypass access restrictions on qpidd via unknown vectors, related to 0-10 connection handling.
CVE-2012-3467, published 2012-08-27. Medium severity, CVSS 5.0. EPSS: 6.4% chance of exploitation in the next 30 days. Apache QPID 0.14, 0.16, and earlier uses a NullAuthenticator mechanism to authenticate catch-up shadow connections to AMQP brokers, which allows remote attackers to bypass authentication.
CVE-2012-4458, published 2013-03-14. Medium severity, CVSS 5.0. EPSS: 6.4% chance of exploitation in the next 30 days. The AMQP type decoder in Apache Qpid 0.20 and earlier allows remote attackers to cause a denial of service (memory consumption and server crash) via a large number of zero width elements in the…
CVE-2019-0223, published 2019-04-23. High severity, CVSS 7.4. EPSS: 6.2% chance of exploitation in the next 30 days. While investigating bug PROTON-2014, we discovered that under some circumstances Apache Qpid Proton versions 0.9 to 0.27.0 (C library and its language bindings) can connect to a peer anonymously…
CVE-2009-5005, published 2010-10-18. Medium severity, CVSS 5.0. EPSS: 5.9% chance of exploitation in the next 30 days. The Cluster::deliveredEvent function in cluster/Cluster.cpp in Apache Qpid, as used in Red Hat Enterprise MRG before 1.3 and other products, allows remote attackers to cause a denial of service…
CVE-2011-3620, published 2012-05-03. High severity, CVSS 7.5. EPSS: 5.3% chance of exploitation in the next 30 days. Apache Qpid 0.12 does not properly verify credentials during the joining of a cluster, which allows remote attackers to obtain access to the messaging functionality and job functionality of a cluster…

Latest

CVE-2013-1909, published 2013-08-23. Medium severity, CVSS 5.8. EPSS: 1.6% chance of exploitation in the next 30 days. The Python client in Apache Qpid before 2.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which…
CVE-2012-4460, published 2013-03-14. Medium severity, CVSS 5.0. EPSS: 3.2% chance of exploitation in the next 30 days. The serializing/deserializing functions in the qpid::framing::Buffer class in Apache Qpid 0.20 and earlier allow remote attackers to cause a denial of service (assertion failure and daemon exit) via…
CVE-2012-4446, published 2013-03-14. Medium severity, CVSS 6.8. EPSS: 4.9% chance of exploitation in the next 30 days. The default configuration for Apache Qpid 0.20 and earlier, when the federation_tag attribute is enabled, accepts AMQP connections without checking the source user ID, which allows remote attackers…