CVE-2019-0200

Source
https://nvd.nist.gov/vuln/detail/CVE-2019-0200
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-0200.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2019-0200
Aliases
Published
2019-03-06T18:29:00Z
Modified
2024-09-02T23:07:11Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

A Denial of Service vulnerability was found in Apache Qpid Broker-J versions 6.0.0-7.0.6 (inclusive) and 7.1.0 which allows an unauthenticated attacker to crash the broker instance by sending specially crafted commands using AMQP protocol versions below 1.0 (AMQP 0-8, 0-9, 0-91 and 0-10). Users of Apache Qpid Broker-J versions 6.0.0-7.0.6 (inclusive) and 7.1.0 utilizing AMQP protocols 0-8, 0-9, 0-91, 0-10 must upgrade to Qpid Broker-J versions 7.0.7 or 7.1.1 or later.

References

Affected packages

Git / github.com/apache/qpid-broker-j

Affected ranges

Type
GIT
Repo
https://github.com/apache/qpid-broker-j
Events