Red Hat Security AdvisoryRHSA-2012:1269
qpid security, bug fix, and enhancement update
Released 2012-09-19 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) python-qpid-0.14-11.el6_3, python-qpid-qmf-0.14-14.el6_3, qpid-cpp-0.14-22.el6_3 +7
- Red Hat Enterprise Linux HPC Node (v. 6) python-qpid-0.14-11.el6_3, python-qpid-qmf-0.14-14.el6_3, qpid-cpp-0.14-22.el6_3 +7
- Red Hat Enterprise Linux Server (v. 6) python-qpid-0.14-11.el6_3, python-qpid-qmf-0.14-14.el6_3, qpid-cpp-0.14-22.el6_3 +11
- Red Hat Enterprise Linux Workstation (v. 6) python-qpid-0.14-11.el6_3, python-qpid-qmf-0.14-14.el6_3, qpid-cpp-0.14-22.el6_3 +7
Fixes 1 record
Priority LOW 30
Apache Qpid 0.17 and earlier does not properly restrict incoming client connections, which allows remote attackers to cause a denial of service (file descriptor consumption) via a large number of incomplete connections.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.04236 · Published 2012-09-28 · Partial fix CWE-399
