Red Hat Security AdvisoryRHSA-2013:0562
Red Hat Enterprise MRG Messaging 2.3 security update
Released 2013-03-06 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat MRG Grid Execute Node for RHEL 6 ComputeNode v.2 mrg-release-2.3.0-1.el6, python-qpid-0.18-4.el6, python-qpid-qmf-0.18-15.el6 +21
- Red Hat MRG Grid Execute Node for RHEL 6 Server v.2 mrg-release-2.3.0-1.el6
- Red Hat MRG Grid for RHEL 6 Server v.2 mrg-release-2.3.0-1.el6, rubygem-rake-0.8.7-2.1.el6, rubygems-1.8.16-1.el6
- Red Hat MRG Management for RHEL 6 ComputeNode v.2 mrg-release-2.3.0-1.el6
- Red Hat MRG Management for RHEL 6 Server v.2 cumin-messaging-0.1.1-2.el6, mrg-release-2.3.0-1.el6
- Red Hat MRG Messaging for RHEL 6 Server v.2 mrg-release-2.3.0-1.el6, python-qpid-0.18-4.el6, python-qpid-qmf-0.18-15.el6 +35
- Red Hat MRG Realtime for RHEL 6 Server v.2 mrg-release-2.3.0-1.el6
Fixes 3 records
Priority LOW 38
The default configuration for Apache Qpid 0.20 and earlier, when the federation_tag attribute is enabled, accepts AMQP connections without checking the source user ID, which allows remote attackers to bypass authenticati…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.04913 · Published 2013-03-12 · Partial fix · 0.20 CWE-287
Priority LOW 35
Integer overflow in the qpid::framing::Buffer::checkAvailable function in Apache Qpid 0.20 and earlier allows remote attackers to cause a denial of service (crash) via a crafted message, which triggers an out-of-bounds r…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.09212 · Published 2013-03-12 · Partial fix CWE-189
Priority LOW 32
The AMQP type decoder in Apache Qpid 0.20 and earlier allows remote attackers to cause a denial of service (memory consumption and server crash) via a large number of zero width elements in the client-properties map in a…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.06355 · Published 2013-03-12 · Partial fix CWE-189
THREATIST.IORead the docs