CVE-2026-67553

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-67553

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-67553.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-67553

Published

2026-08-05T05:37:29Z

Modified

2026-08-12T03:51:44Z

Severity

6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

Apache Qpid Proton Dotnet: Incoming session flow control window can be exceeded

Details

An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service.

This issue affects Apache Qpid Proton-Dotnet: through 1.0.0.

Users are recommended to upgrade to version 1.1.0, which fixes the issue.

Database specific

{
    "cna_assigner": "apache",
    "cwe_ids": [
        "CWE-770"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/67xxx/CVE-2026-67553.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "last_affected": "1.0.0"
                }
            ],
            "source": "AFFECTED_FIELD"
        },
        {
            "extracted_events": [
                {
                    "fixed": "1.0.0"
                }
            ],
            "source": "DESCRIPTION"
        }
    ]
}

References

Affected packages

Git / github.com/apache/qpid-proton-dotnet

Affected ranges

Type

GIT

Repo

https://github.com/apache/qpid-proton-dotnet

Events

Introduced

Fixed

57cecabed730eb60b706e204fac7aacd7f101fad

Database specific

Show details

{
    "cpe": "cpe:2.3:a:apache:qpid_proton-dotnet:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.1.0"
        }
    ],
    "source": "CPE_RANGE"
}

Affected versions

1.*

1.0.0

1.0.0-M1

1.0.0-M10

1.0.0-M11

1.0.0-M2

1.0.0-M3

1.0.0-M4

1.0.0-M5

1.0.0-M6

1.0.0-M7

1.0.0-M8

1.0.0-M9

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-67553.json"