Red Hat Security Advisory

RHSA-2015:0708

qpid security and bug fix update

Released 2015-03-19 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat MRG Messaging v.3 for RHEL-7 libdb-5.3.21-17.el7_0.1, libdb-cxx-5.3.21-17.el7_0.1, libdb-cxx-devel-5.3.21-17.el7_0.1 +15

Fixes 3 records

TI-2015-00196 CVE-2015-0224 · GHSA-qrxf-m4mx-cp67

qpidd in Apache Qpid 0.30 and earlier allows remote attackers to cause a denial of…

MEDIUM 49

qpidd in Apache Qpid 0.30 and earlier allows remote attackers to cause a denial of service (daemon crash) via a crafted protocol sequence set.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.15119 Published 2017-10-30 Partial fix CWE-19

TI-2015-00175 CVE-2015-0203 · GHSA-2cpf-hgj9-5h23

The qpidd broker in Apache Qpid 0.30 and earlier allows remote authenticated users to…

MEDIUM 40

The qpidd broker in Apache Qpid 0.30 and earlier allows remote authenticated users to cause a denial of service (daemon crash) via an AMQP message with (1) an invalid range in a sequence set, (2) content-bearing methods…

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.08523 Published 2018-02-21 Partial fix CWE-19

TI-2015-00195 CVE-2015-0223 · GHSA-qf3w-wxcx-5cx6

Unspecified vulnerability in Apache Qpid 0.30 and earlier allows remote attackers to…

LOW 32

Unspecified vulnerability in Apache Qpid 0.30 and earlier allows remote attackers to bypass access restrictions on qpidd via unknown vectors, related to 0-10 connection handling.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.06623 Published 2015-02-02 Partial fix CWE-264