Red Hat Security AdvisoryRHSA-2010:0756
Red Hat Enterprise MRG Messaging security and bug fix update 1.2.2
Released 2010-10-08 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat MRG Messaging Base for RHEL 5 Server qmf-0.5.752581-42.el5, qmf-0.5.752581-42.el5.i386, qmf-devel-0.5.752581-42.el5 +13
- Red Hat MRG Messaging for RHEL 5 Server qmf-0.5.752581-42.el5, qmf-0.5.752581-42.el5.i386, qmf-devel-0.5.752581-42.el5 +27
Fixes 2 records
Priority LOW 28
sys/ssl/SslSocket.cpp in qpidd in Apache Qpid, as used in Red Hat Enterprise MRG before 1.2.2 and other products, when SSL is enabled, allows remote attackers to cause a denial of service (daemon outage) by connecting to…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.04711 · Published 2010-10-12 · Fixed
Priority LOW 22
lib/MessageStoreImpl.cpp in Red Hat Enterprise MRG before 1.2.2 allows remote authenticated users to cause a denial of service (stack memory exhaustion and broker crash) via a large persistent message.
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.01475 · Published 2010-10-12 · Fixed CWE-399
