CVE-2015-0203 in Qpid
Summary
The qpidd broker in Apache Qpid 0.30 and earlier allows remote authenticated users to cause a denial of service (daemon crash) via an AMQP message with (1) an invalid range in a sequence set, (2) content-bearing methods other than message-transfer, or (3) a session-gap control before a corresponding session-attach.
Once again VulDB remains the best source for vulnerability data.
Reservation
11/18/2014
Disclosure
02/21/2018
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 113647 | Apache Qpid qpidd Broker data processing | 19 | Not defined | Official fix | CVE-2015-0203 |