Read the docs
TI-2019-00196 Aliases CVE-2019-0223

While investigating bug PROTON-2014, we discovered that under some circumstances Apache…

Priority MEDIUM 42Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
High · High · None
Fix status
Partial Red Hat: 108 fixed, 7 without a fix

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat.

Summary

While investigating bug PROTON-2014, we discovered that under some circumstances Apache Qpid Proton versions 0.9 to 0.27.0 (C library and its language bindings) can connect to a peer anonymously using TLS *even when configured to verify the peer certificate* while used with OpenSSL versions before 1.1.0. This means that an undetected man in the middle attack could be constructed if an attacker can arrange to intercept TLS traffic.

Why it matters now

EPSS 0.06228 93rd percentileScored 2026-11-07
Fix Partial Red Hat: 10 advisoriesRed Hat: 108 fixed, 7 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
ApacheApache Qpid Proton0.9 to 0.27.0—No fix listedCNA
  • Apache Qpid Proton VendorApache Affected 0.9 to 0.27.0 Fixed in — No fix listed CNA

CPE configurations NVD · 33

CPEVersionsRoleVendor
cpe:2.3:a:apache:qpid:*:*:*:*:*:*:*:*0.9 – 0.27.0VulnerableApache
cpe:2.3:a:redhat:jboss_amq_clients_2:-:*:*:*:*:*:*:*not specified by NVDVulnerableRed Hat
cpe:2.3:o:redhat:linux:6.0:*:*:*:*:*:*:*6.0Running onRed Hat
cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*7.0Running onRed Hat
cpe:2.3:a:redhat:openstack:13:*:*:*:*:*:*:*13VulnerableRed Hat
cpe:2.3:a:redhat:openstack:14:*:*:*:*:*:*:*14VulnerableRed Hat
cpe:2.3:a:redhat:satellite:6.3:*:*:*:*:*:*:*6.3VulnerableRed Hat
cpe:2.3:a:redhat:satellite:6.4:*:*:*:*:*:*:*6.4VulnerableRed Hat
cpe:2.3:a:redhat:satellite:6.5:*:*:*:*:*:*:*6.5VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*6.0VulnerableRed Hat
  • cpe:2.3:a:apache:qpid:*:*:*:*:*:*:*:* Versions 0.9 – 0.27.0 Vulnerable ·Apache
  • cpe:2.3:a:redhat:jboss_amq_clients_2:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:linux:6.0:*:*:*:*:*:*:* Versions 6.0 Running on ·Red Hat
  • cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:* Versions 7.0 Running on ·Red Hat
  • cpe:2.3:a:redhat:openstack:13:*:*:*:*:*:*:* Versions 13 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:openstack:14:*:*:*:*:*:*:* Versions 14 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:satellite:6.3:*:*:*:*:*:*:* Versions 6.3 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:satellite:6.4:*:*:*:*:*:*:* Versions 6.4 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:satellite:6.5:*:*:*:*:*:*:* Versions 6.5 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
Show 23 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus:6.7:*:*:*:*:*:*:*6.7VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus:7.2:*:*:*:*:*:*:*7.2VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*7.3VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*7.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*7.5VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*7.6VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*6.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:5.9:*:*:*:*:*:*:*5.9VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:6.4:*:*:*:*:*:*:*6.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:6.5:*:*:*:*:*:*:*6.5VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:6.6:*:*:*:*:*:*:*6.6VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*7.2VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*7.3VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*7.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*7.6VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:*7.2VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*7.3VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*7.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*7.6VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*6.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
  • cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus:6.7:*:*:*:*:*:*:* Versions 6.7 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus:7.2:*:*:*:*:*:*:* Versions 7.2 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:* Versions 7.3 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:* Versions 7.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:* Versions 7.5 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:* Versions 7.6 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:5.9:*:*:*:*:*:*:* Versions 5.9 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:6.4:*:*:*:*:*:*:* Versions 6.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:6.5:*:*:*:*:*:*:* Versions 6.5 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:6.6:*:*:*:*:*:*:* Versions 6.6 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:* Versions 7.2 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:* Versions 7.3 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:* Versions 7.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:* Versions 7.6 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:* Versions 7.2 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:* Versions 7.3 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:* Versions 7.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:* Versions 7.6 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat

Remediation

Red Hat 10 advisories

  • RHSA-2019:2781 Released 2019-09-20 · Red Hat rating Important
    qpid-proton security update
    • Satellite Tools 6.3 (v. 5.9.AUS Server) python-qpid-proton-0.9-22.el5, python-qpid-proton-0.9-22.el5.i386, qpid-proton-0.9-22.el5 +2
    • Satellite Tools 6.3 (v. 5.9.ELS Server) python-qpid-proton-0.9-22.el5, python-qpid-proton-0.9-22.el5.i386, qpid-proton-0.9-22.el5 +2
    • Satellite Tools 6.3 (v. 6 Client) python-qpid-proton-0.16.0-14.el6sat, qpid-proton-0.16.0-14.el6sat, qpid-proton-c-0.16.0-14.el6sat
    • Satellite Tools 6.3 (v. 6 ComputeNode) python-qpid-proton-0.16.0-14.el6sat, qpid-proton-0.16.0-14.el6sat, qpid-proton-c-0.16.0-14.el6sat
    • Satellite Tools 6.3 (v. 6 Server) python-qpid-proton-0.16.0-14.el6sat, qpid-proton-0.16.0-14.el6sat, qpid-proton-c-0.16.0-14.el6sat
    • Satellite Tools 6.3 (v. 6 Workstation) python-qpid-proton-0.16.0-14.el6sat, qpid-proton-0.16.0-14.el6sat, qpid-proton-c-0.16.0-14.el6sat
    • Satellite Tools 6.3 (v. 6.4.AUS Server) python-qpid-proton-0.16.0-14.el6sat, qpid-proton-0.16.0-14.el6sat, qpid-proton-c-0.16.0-14.el6sat
    • Satellite Tools 6.3 (v. 6.5.AUS Server) python-qpid-proton-0.16.0-14.el6sat, qpid-proton-0.16.0-14.el6sat, qpid-proton-c-0.16.0-14.el6sat
    • Satellite Tools 6.3 (v. 6.6.AUS Server) python-qpid-proton-0.16.0-14.el6sat, qpid-proton-0.16.0-14.el6sat, qpid-proton-c-0.16.0-14.el6sat
    • Satellite Tools 6.3 (v. 6.7.EUS ComputeNode) python-qpid-proton-0.16.0-14.el6sat, qpid-proton-0.16.0-14.el6sat, qpid-proton-c-0.16.0-14.el6sat
    • Satellite Tools 6.3 (v. 6.7.EUS Server) python-qpid-proton-0.16.0-14.el6sat, qpid-proton-0.16.0-14.el6sat, qpid-proton-c-0.16.0-14.el6sat
    • Satellite Tools 6.3 (v. 7 ComputeNode) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
    • Satellite Tools 6.3 (v. 7 Server) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
    • Satellite Tools 6.3 (v. 7 Workstation) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
    • Satellite Tools 6.3 (v. 7.2.AUS Server) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
    • Satellite Tools 6.3 (v. 7.2.E4S Server) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
    • Satellite Tools 6.3 (v. 7.2.EUS ComputeNode) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
    • Satellite Tools 6.3 (v. 7.2.EUS Server) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
    • Satellite Tools 6.3 (v. 7.3.AUS Server) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
    • Satellite Tools 6.3 (v. 7.3.E4S Server) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
    • Satellite Tools 6.3 (v. 7.3.EUS ComputeNode) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
    • Satellite Tools 6.3 (v. 7.3.EUS Server) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
    • Satellite Tools 6.3 (v. 7.4.AUS Server) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
    • Satellite Tools 6.3 (v. 7.4.E4S Server) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
    • Satellite Tools 6.3 (v. 7.4.EUS ComputeNode) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
    • Satellite Tools 6.3 (v. 7.4.EUS Server) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
    • Satellite Tools 6.3 (v. 7.5.EUS ComputeNode) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
    • Satellite Tools 6.3 (v. 7.5.EUS Server) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
    • Satellite Tools 6.3 (v. 7.6.AUS Server) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
    • Satellite Tools 6.3 (v. 7.6.E4S Server) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
    • Satellite Tools 6.3 (v. 7.6.EUS Compute Node) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
    • Satellite Tools 6.3 (v. 7.6.EUS Server) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
    • Satellite Tools 6.3 (v. RHEL-ALT 7.6 Server) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
    • Satellite Tools 7.3 (v. 7 Client) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
  • RHSA-2019:2782 Released 2019-09-20 · Red Hat rating Important
    qpid-proton security update
    • Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
    • Satellite Tools 6.4 (v. 5.9.AUS Server) python-qpid-proton-0.9-22.el5, python-qpid-proton-0.9-22.el5.i386, qpid-proton-0.9-22.el5 +2
    • Satellite Tools 6.4 (v. 5.9.ELS Server) python-qpid-proton-0.9-22.el5, python-qpid-proton-0.9-22.el5.i386, qpid-proton-0.9-22.el5 +2
    • Satellite Tools 6.4 (v. 6 Client) python-qpid-proton-0.16.0-14.el6sat, qpid-proton-0.16.0-14.el6sat, qpid-proton-c-0.16.0-14.el6sat
    • Satellite Tools 6.4 (v. 6 ComputeNode) python-qpid-proton-0.16.0-14.el6sat, qpid-proton-0.16.0-14.el6sat, qpid-proton-c-0.16.0-14.el6sat
    • Satellite Tools 6.4 (v. 6 Server) python-qpid-proton-0.16.0-14.el6sat, qpid-proton-0.16.0-14.el6sat, qpid-proton-c-0.16.0-14.el6sat
    • Satellite Tools 6.4 (v. 6 Workstation) python-qpid-proton-0.16.0-14.el6sat, qpid-proton-0.16.0-14.el6sat, qpid-proton-c-0.16.0-14.el6sat
    • Satellite Tools 6.4 (v. 6.7.EUS ComputeNode) python-qpid-proton-0.16.0-14.el6sat, qpid-proton-0.16.0-14.el6sat, qpid-proton-c-0.16.0-14.el6sat
    • Satellite Tools 6.4 (v. 6.7.EUS Server) python-qpid-proton-0.16.0-14.el6sat, qpid-proton-0.16.0-14.el6sat, qpid-proton-c-0.16.0-14.el6sat
    • Satellite Tools 6.4 (v. 7 Client) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
    • Satellite Tools 6.4 (v. 7 ComputeNode) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
    • Satellite Tools 6.4 (v. 7 Server) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
    • Satellite Tools 6.4 (v. 7 Workstation) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
    • Satellite Tools 6.4 (v. 7.2.AUS Server) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
    • Satellite Tools 6.4 (v. 7.2.E4S Server) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
    • Satellite Tools 6.4 (v. 7.2.TUS Server) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
    • Satellite Tools 6.4 (v. 7.3.AUS Server) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
    • Satellite Tools 6.4 (v. 7.3.E4S Server) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
    • Satellite Tools 6.4 (v. 7.3.TUS Server) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
    • Satellite Tools 6.4 (v. 7.4.AUS Server) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
    • Satellite Tools 6.4 (v. 7.4.E4S Server) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
    • Satellite Tools 6.4 (v. 7.4.EUS ComputeNode) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
    • Satellite Tools 6.4 (v. 7.4.EUS Server) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
    • Satellite Tools 6.4 (v. 7.4.TUS Server) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
    • Satellite Tools 6.4 (v. 7.5.EUS ComputeNode) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
    • Satellite Tools 6.4 (v. 7.5.EUS Server) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
    • Satellite Tools 6.4 (v. 7.6.AUS Server) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
    • Satellite Tools 6.4 (v. 7.6.E4S Server) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
    • Satellite Tools 6.4 (v. 7.6.EUS Compute Node) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
    • Satellite Tools 6.4 (v. 7.6.EUS Server) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
    • Satellite Tools 6.4 (v. 7.6.TUS Server) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
    • Satellite Tools 6.4 (v. RHEL-ALT 7.6 Server) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
  • RHSA-2019:2780 Released 2019-09-17 · Red Hat rating Important
    qpid-proton security update
    • Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts python-qpid-proton-0.28.0-1.el7, qpid-proton-c-0.28.0-1.el7
    • Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts python-qpid-proton-0.28.0-1.el7, qpid-proton-0.28.0-1.el7, qpid-proton-c-0.28.0-1.el7
    • Satellite Tools 6.5 (v. 5.9.AUS Server) python-qpid-proton-0.9-22.el5, python-qpid-proton-0.9-22.el5.i386, qpid-proton-0.9-22.el5 +2
    • Satellite Tools 6.5 (v. 5.9.ELS Server) python-qpid-proton-0.9-22.el5, python-qpid-proton-0.9-22.el5.i386, qpid-proton-0.9-22.el5 +2
    • Satellite Tools 6.5 (v. 6 Client) python-qpid-proton-0.16.0-14.el6sat, qpid-proton-0.16.0-14.el6sat, qpid-proton-c-0.16.0-14.el6sat
    • Satellite Tools 6.5 (v. 6 ComputeNode) python-qpid-proton-0.16.0-14.el6sat, qpid-proton-0.16.0-14.el6sat, qpid-proton-c-0.16.0-14.el6sat
    • Satellite Tools 6.5 (v. 6 Server) python-qpid-proton-0.16.0-14.el6sat, qpid-proton-0.16.0-14.el6sat, qpid-proton-c-0.16.0-14.el6sat
    • Satellite Tools 6.5 (v. 6 Workstation) python-qpid-proton-0.16.0-14.el6sat, qpid-proton-0.16.0-14.el6sat, qpid-proton-c-0.16.0-14.el6sat
    • Satellite Tools 6.5 (v. 7 Client) python-qpid-proton-0.28.0-1.el7, qpid-proton-0.28.0-1.el7, qpid-proton-c-0.28.0-1.el7
    • Satellite Tools 6.5 (v. 7 ComputeNode) python-qpid-proton-0.28.0-1.el7, qpid-proton-0.28.0-1.el7, qpid-proton-c-0.28.0-1.el7
    • Satellite Tools 6.5 (v. 7 Server) python-qpid-proton-0.28.0-1.el7, qpid-proton-0.28.0-1.el7, qpid-proton-c-0.28.0-1.el7
    • Satellite Tools 6.5 (v. 7 Workstation) python-qpid-proton-0.28.0-1.el7, qpid-proton-0.28.0-1.el7, qpid-proton-c-0.28.0-1.el7
    • Satellite Tools 6.5 (v. 7.2.AUS Server) python-qpid-proton-0.28.0-1.el7, qpid-proton-0.28.0-1.el7, qpid-proton-c-0.28.0-1.el7
    • Satellite Tools 6.5 (v. 7.2.E4S Server) python-qpid-proton-0.28.0-1.el7, qpid-proton-0.28.0-1.el7, qpid-proton-c-0.28.0-1.el7
    • Satellite Tools 6.5 (v. 7.2.TUS Server) python-qpid-proton-0.28.0-1.el7, qpid-proton-0.28.0-1.el7, qpid-proton-c-0.28.0-1.el7
    • Satellite Tools 6.5 (v. 7.3.AUS Server) python-qpid-proton-0.28.0-1.el7, qpid-proton-0.28.0-1.el7, qpid-proton-c-0.28.0-1.el7
    • Satellite Tools 6.5 (v. 7.3.E4S Server) python-qpid-proton-0.28.0-1.el7, qpid-proton-0.28.0-1.el7, qpid-proton-c-0.28.0-1.el7
    • Satellite Tools 6.5 (v. 7.3.TUS Server) python-qpid-proton-0.28.0-1.el7, qpid-proton-0.28.0-1.el7, qpid-proton-c-0.28.0-1.el7
    • Satellite Tools 6.5 (v. 7.4.AUS Server) python-qpid-proton-0.28.0-1.el7, qpid-proton-0.28.0-1.el7, qpid-proton-c-0.28.0-1.el7
    • Satellite Tools 6.5 (v. 7.4.E4S Server) python-qpid-proton-0.28.0-1.el7, qpid-proton-0.28.0-1.el7, qpid-proton-c-0.28.0-1.el7
    • Satellite Tools 6.5 (v. 7.4.EUS ComputeNode) python-qpid-proton-0.28.0-1.el7, qpid-proton-0.28.0-1.el7, qpid-proton-c-0.28.0-1.el7
    • Satellite Tools 6.5 (v. 7.4.EUS Server) python-qpid-proton-0.28.0-1.el7, qpid-proton-0.28.0-1.el7, qpid-proton-c-0.28.0-1.el7
    • Satellite Tools 6.5 (v. 7.4.TUS Server) python-qpid-proton-0.28.0-1.el7, qpid-proton-0.28.0-1.el7, qpid-proton-c-0.28.0-1.el7
    • Satellite Tools 6.5 (v. 7.5.EUS ComputeNode) python-qpid-proton-0.28.0-1.el7, qpid-proton-0.28.0-1.el7, qpid-proton-c-0.28.0-1.el7
    • Satellite Tools 6.5 (v. 7.5.EUS Server) python-qpid-proton-0.28.0-1.el7, qpid-proton-0.28.0-1.el7, qpid-proton-c-0.28.0-1.el7
    • Satellite Tools 6.5 (v. 7.6.AUS Server) python-qpid-proton-0.28.0-1.el7, qpid-proton-0.28.0-1.el7, qpid-proton-c-0.28.0-1.el7
    • Satellite Tools 6.5 (v. 7.6.E4S Server) python-qpid-proton-0.28.0-1.el7, qpid-proton-0.28.0-1.el7, qpid-proton-c-0.28.0-1.el7
    • Satellite Tools 6.5 (v. 7.6.EUS Compute Node) python-qpid-proton-0.28.0-1.el7, qpid-proton-0.28.0-1.el7, qpid-proton-c-0.28.0-1.el7
    • Satellite Tools 6.5 (v. 7.6.EUS Server) python-qpid-proton-0.28.0-1.el7, qpid-proton-0.28.0-1.el7, qpid-proton-c-0.28.0-1.el7
    • Satellite Tools 6.5 (v. 7.6.TUS Server) python-qpid-proton-0.28.0-1.el7, qpid-proton-0.28.0-1.el7, qpid-proton-c-0.28.0-1.el7
    • Satellite Tools 6.5 (v. 8) python3-qpid-proton-0.28.0-1.el8, qpid-proton-0.28.0-1.el8, qpid-proton-c-0.28.0-1.el8
    • Satellite Tools 6.5 (v. RHEL-ALT 7.6 Server) python-qpid-proton-0.28.0-1.el7, qpid-proton-0.28.0-1.el7, qpid-proton-c-0.28.0-1.el7
Show 7 more Red Hat advisories
  • RHSA-2019:2779 Released 2019-09-17 · Red Hat rating Important
    qpid-proton security update
    • Red Hat Satellite 6.3 python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
    • Red Hat Satellite Capsule 6.3 python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
  • RHSA-2019:2778 Released 2019-09-17 · Red Hat rating Important
    qpid-proton security update
    • Red Hat Satellite 6.4 python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
    • Red Hat Satellite Capsule 6.4 python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
  • RHSA-2019:2777 Released 2019-09-17 · Red Hat rating Important
    qpid-proton security update
    • Red Hat Satellite 6.5 python-qpid-proton-0.28.0-1.el7, qpid-proton-0.28.0-1.el7, qpid-proton-c-0.28.0-1.el7
    • Red Hat Satellite Capsule 6.5 python-qpid-proton-0.28.0-1.el7, qpid-proton-0.28.0-1.el7, qpid-proton-c-0.28.0-1.el7
  • RHSA-2019:1399 Released 2019-06-06 · Red Hat rating Moderate
    qpid-proton security update
    • Red Hat OpenStack Platform 14.0 python-qpid-proton-0.27.0-3.el7, qpid-proton-0.27.0-3.el7, qpid-proton-c-0.27.0-3.el7
  • RHSA-2019:1400 Released 2019-06-06 · Red Hat rating Moderate
    qpid-proton security update
    • Red Hat OpenStack Platform 13.0 jsoncpp-1.7.7-1.el7, python-qpid-proton-0.27.0-3.el7, qpid-proton-0.27.0-3.el7 +2
  • RHSA-2019:1398 Released 2019-06-06 · Red Hat rating Moderate
    qpid-proton security update
    • Red Hat OpenStack Platform 14.0 Operational Tools for RHEL 7 qpid-proton-0.27.0-3.el7, qpid-proton-c-0.27.0-3.el7
  • RHSA-2019:0886 Released 2019-04-25 · Red Hat rating Important
    AMQ Clients 2.3.1 release and security update
    • Red Hat AMQ Clients 2 python-qpid-proton-0.27.0-3.el6, python-qpid-proton-0.27.0-3.el7, python-qpid-proton-docs-0.27.0-3.el6 +17

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
A-MQ Interconnect 1AffectedNo fix yet
Red Hat Enterprise MRG 3AffectedNo fix planned: Will not fix
Red Hat JBoss A-MQ 6AffectedNo fix planned: Out of support scope
Red Hat JBoss Fuse 6AffectedNo fix planned: Out of support scope
Red Hat OpenShift Application RuntimesAffectedNo fix yet
Red Hat OpenStack Platform 8 (Liberty)AffectedNo fix planned: Will not fix
Red Hat Update Infrastructure 3 for Cloud ProvidersAffectedNo fix planned: Will not fix
CloudForms Management Engine 5.11Fixed—
Red Hat AMQ Clients 2Fixed RHSA-2019:0886
Red Hat OpenStack Platform 13.0Fixed RHSA-2019:1400
Red Hat OpenStack Platform 14.0Fixed RHSA-2019:1399
Red Hat OpenStack Platform 14.0 Operational Tools for RHEL 7Fixed RHSA-2019:1398
Red Hat Satellite 6.3Fixed RHSA-2019:2779
Red Hat Satellite 6.4Fixed RHSA-2019:2778
Red Hat Satellite 6.5Fixed RHSA-2019:2777
Red Hat Satellite Capsule 6.3Fixed RHSA-2019:2779
Red Hat Satellite Capsule 6.4Fixed RHSA-2019:2778
Red Hat Satellite Capsule 6.5Fixed RHSA-2019:2777
Red Hat Virtualization 4 Management Agent for RHEL 7 HostsFixed RHSA-2019:2780, RHSA-2019:2782
Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS HostsFixed RHSA-2019:2780
Satellite Tools 6.3 (v. 5.9.AUS Server)Fixed RHSA-2019:2781
Satellite Tools 6.3 (v. 5.9.ELS Server)Fixed RHSA-2019:2781
Satellite Tools 6.3 (v. 6 Client)Fixed RHSA-2019:2781
Satellite Tools 6.3 (v. 6 ComputeNode)Fixed RHSA-2019:2781
Satellite Tools 6.3 (v. 6 Server)Fixed RHSA-2019:2781
Satellite Tools 6.3 (v. 6 Workstation)Fixed RHSA-2019:2781
Satellite Tools 6.3 (v. 6.4.AUS Server)Fixed RHSA-2019:2781
Satellite Tools 6.3 (v. 6.5.AUS Server)Fixed RHSA-2019:2781
Satellite Tools 6.3 (v. 6.6.AUS Server)Fixed RHSA-2019:2781
Satellite Tools 6.3 (v. 6.7.EUS ComputeNode)Fixed RHSA-2019:2781
Satellite Tools 6.3 (v. 6.7.EUS Server)Fixed RHSA-2019:2781
Satellite Tools 6.3 (v. 7 ComputeNode)Fixed RHSA-2019:2781
Satellite Tools 6.3 (v. 7 Server)Fixed RHSA-2019:2781
Satellite Tools 6.3 (v. 7 Workstation)Fixed RHSA-2019:2781
Satellite Tools 6.3 (v. 7.2.AUS Server)Fixed RHSA-2019:2781
Satellite Tools 6.3 (v. 7.2.E4S Server)Fixed RHSA-2019:2781
Satellite Tools 6.3 (v. 7.2.EUS ComputeNode)Fixed RHSA-2019:2781
Satellite Tools 6.3 (v. 7.2.EUS Server)Fixed RHSA-2019:2781
Satellite Tools 6.3 (v. 7.3.AUS Server)Fixed RHSA-2019:2781
Satellite Tools 6.3 (v. 7.3.E4S Server)Fixed RHSA-2019:2781
Satellite Tools 6.3 (v. 7.3.EUS ComputeNode)Fixed RHSA-2019:2781
Satellite Tools 6.3 (v. 7.3.EUS Server)Fixed RHSA-2019:2781
Satellite Tools 6.3 (v. 7.4.AUS Server)Fixed RHSA-2019:2781
Satellite Tools 6.3 (v. 7.4.E4S Server)Fixed RHSA-2019:2781
Satellite Tools 6.3 (v. 7.4.EUS ComputeNode)Fixed RHSA-2019:2781
Satellite Tools 6.3 (v. 7.4.EUS Server)Fixed RHSA-2019:2781
Satellite Tools 6.3 (v. 7.5.EUS ComputeNode)Fixed RHSA-2019:2781
Satellite Tools 6.3 (v. 7.5.EUS Server)Fixed RHSA-2019:2781
Satellite Tools 6.3 (v. 7.6.AUS Server)Fixed RHSA-2019:2781
Satellite Tools 6.3 (v. 7.6.E4S Server)Fixed RHSA-2019:2781
Satellite Tools 6.3 (v. 7.6.EUS Compute Node)Fixed RHSA-2019:2781
Satellite Tools 6.3 (v. 7.6.EUS Server)Fixed RHSA-2019:2781
Satellite Tools 6.3 (v. RHEL-ALT 7.6 Server)Fixed RHSA-2019:2781
Satellite Tools 6.4 (v. 5.9.AUS Server)Fixed RHSA-2019:2782
Satellite Tools 6.4 (v. 5.9.ELS Server)Fixed RHSA-2019:2782
Satellite Tools 6.4 (v. 6 Client)Fixed RHSA-2019:2782
Satellite Tools 6.4 (v. 6 ComputeNode)Fixed RHSA-2019:2782
Satellite Tools 6.4 (v. 6 Server)Fixed RHSA-2019:2782
Satellite Tools 6.4 (v. 6 Workstation)Fixed RHSA-2019:2782
Satellite Tools 6.4 (v. 6.7.EUS ComputeNode)Fixed RHSA-2019:2782
Satellite Tools 6.4 (v. 6.7.EUS Server)Fixed RHSA-2019:2782
Satellite Tools 6.4 (v. 7 Client)Fixed RHSA-2019:2782
Satellite Tools 6.4 (v. 7 ComputeNode)Fixed RHSA-2019:2782
Satellite Tools 6.4 (v. 7 Server)Fixed RHSA-2019:2782
Satellite Tools 6.4 (v. 7 Workstation)Fixed RHSA-2019:2782
Satellite Tools 6.4 (v. 7.2.AUS Server)Fixed RHSA-2019:2782
Satellite Tools 6.4 (v. 7.2.E4S Server)Fixed RHSA-2019:2782
Satellite Tools 6.4 (v. 7.2.TUS Server)Fixed RHSA-2019:2782
Satellite Tools 6.4 (v. 7.3.AUS Server)Fixed RHSA-2019:2782
Satellite Tools 6.4 (v. 7.3.E4S Server)Fixed RHSA-2019:2782
Satellite Tools 6.4 (v. 7.3.TUS Server)Fixed RHSA-2019:2782
Satellite Tools 6.4 (v. 7.4.AUS Server)Fixed RHSA-2019:2782
Satellite Tools 6.4 (v. 7.4.E4S Server)Fixed RHSA-2019:2782
Satellite Tools 6.4 (v. 7.4.EUS ComputeNode)Fixed RHSA-2019:2782
Satellite Tools 6.4 (v. 7.4.EUS Server)Fixed RHSA-2019:2782
Satellite Tools 6.4 (v. 7.4.TUS Server)Fixed RHSA-2019:2782
Satellite Tools 6.4 (v. 7.5.EUS ComputeNode)Fixed RHSA-2019:2782
Satellite Tools 6.4 (v. 7.5.EUS Server)Fixed RHSA-2019:2782
Satellite Tools 6.4 (v. 7.6.AUS Server)Fixed RHSA-2019:2782
Satellite Tools 6.4 (v. 7.6.E4S Server)Fixed RHSA-2019:2782
Satellite Tools 6.4 (v. 7.6.EUS Compute Node)Fixed RHSA-2019:2782
Satellite Tools 6.4 (v. 7.6.EUS Server)Fixed RHSA-2019:2782
Satellite Tools 6.4 (v. 7.6.TUS Server)Fixed RHSA-2019:2782
Satellite Tools 6.4 (v. RHEL-ALT 7.6 Server)Fixed RHSA-2019:2782
Satellite Tools 6.5 (v. 5.9.AUS Server)Fixed RHSA-2019:2780
Satellite Tools 6.5 (v. 5.9.ELS Server)Fixed RHSA-2019:2780
Satellite Tools 6.5 (v. 6 Client)Fixed RHSA-2019:2780
Satellite Tools 6.5 (v. 6 ComputeNode)Fixed RHSA-2019:2780
Satellite Tools 6.5 (v. 6 Server)Fixed RHSA-2019:2780
Satellite Tools 6.5 (v. 6 Workstation)Fixed RHSA-2019:2780
Satellite Tools 6.5 (v. 7 Client)Fixed RHSA-2019:2780
Satellite Tools 6.5 (v. 7 ComputeNode)Fixed RHSA-2019:2780
Satellite Tools 6.5 (v. 7 Server)Fixed RHSA-2019:2780
Satellite Tools 6.5 (v. 7 Workstation)Fixed RHSA-2019:2780
Satellite Tools 6.5 (v. 7.2.AUS Server)Fixed RHSA-2019:2780
Satellite Tools 6.5 (v. 7.2.E4S Server)Fixed RHSA-2019:2780
Satellite Tools 6.5 (v. 7.2.TUS Server)Fixed RHSA-2019:2780
Satellite Tools 6.5 (v. 7.3.AUS Server)Fixed RHSA-2019:2780
Satellite Tools 6.5 (v. 7.3.E4S Server)Fixed RHSA-2019:2780
Satellite Tools 6.5 (v. 7.3.TUS Server)Fixed RHSA-2019:2780
Satellite Tools 6.5 (v. 7.4.AUS Server)Fixed RHSA-2019:2780
Satellite Tools 6.5 (v. 7.4.E4S Server)Fixed RHSA-2019:2780
Satellite Tools 6.5 (v. 7.4.EUS ComputeNode)Fixed RHSA-2019:2780
Satellite Tools 6.5 (v. 7.4.EUS Server)Fixed RHSA-2019:2780
Satellite Tools 6.5 (v. 7.4.TUS Server)Fixed RHSA-2019:2780
Satellite Tools 6.5 (v. 7.5.EUS ComputeNode)Fixed RHSA-2019:2780
Satellite Tools 6.5 (v. 7.5.EUS Server)Fixed RHSA-2019:2780
Satellite Tools 6.5 (v. 7.6.AUS Server)Fixed RHSA-2019:2780
Satellite Tools 6.5 (v. 7.6.E4S Server)Fixed RHSA-2019:2780
Satellite Tools 6.5 (v. 7.6.EUS Compute Node)Fixed RHSA-2019:2780
Satellite Tools 6.5 (v. 7.6.EUS Server)Fixed RHSA-2019:2780
Satellite Tools 6.5 (v. 7.6.TUS Server)Fixed RHSA-2019:2780
Satellite Tools 6.5 (v. 8)Fixed RHSA-2019:2780
Satellite Tools 6.5 (v. RHEL-ALT 7.6 Server)Fixed RHSA-2019:2780
Satellite Tools 7.3 (v. 7 Client)Fixed RHSA-2019:2781
Not affected: 3 products
  • Red Hat AMQ Broker 7
  • Red Hat Fuse 7
  • Red Hat Virtualization 4

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-0223

References

Advisory 12

Other 5

  • TI-2015-00196 qpidd in Apache Qpid 0.30 and earlier allows remote attackers to cause a denial of… CVSS 3.0HIGH 7.5
  • TI-2011-03194 Apache Qpid 0.12 does not properly verify credentials during the joining of a cluster… CVSS 2.0HIGH 7.5
  • TI-2015-00175 The qpidd broker in Apache Qpid 0.30 and earlier allows remote authenticated users to… CVSS 3.0MEDIUM 6.5
  • TI-2012-03788 The default configuration for Apache Qpid 0.20 and earlier, when the federation_tag… CVSS 2.0MEDIUM 6.8
  • TI-2012-03801 Integer overflow in the qpid::framing::Buffer::checkAvailable function in Apache Qpid… CVSS 2.0MEDIUM 5.0
  • TI-2015-00195 Unspecified vulnerability in Apache Qpid 0.30 and earlier allows remote attackers to… CVSS 2.0MEDIUM 5.0
See all 15 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences