Denial of service vulnerability exists when .NET and .NET Core improperly process XML documents

HIGH 7.5CVE-2018-8030 · GHSA-7xr3-rgwh-pw22 · Published 20/06/2018 · updated 17/06/2026

In short

CVE-2018-8030 is a HIGH (CVSS 7.5) vulnerability affecting org.apache.qpid:apache-qpid-broker-j, qpid broker-j (apache).
Chance of exploitation in the next 30 days (EPSS): 3.8%, higher than 90.0% of all vulnerabilities.
Fix: update to 7.1.0 or later.

Package	Affected versions	Patched versions
org.apache.qpid:apache-qpid-broker-j Maven	`≥ 7.0.0, < 7.1.0`	`7.1.0`
qpid broker-j apache	`≥ 7.0.0, ≤ 7.0.4`	No fix yet

Description

A Denial of Service vulnerability was found in Apache Qpid Broker-J versions 7.x before 7.1.0 when AMQP protocols 0-8, 0-9 or 0-91 are used to publish messages with size greater than allowed maximum message size limit (100MB by default). The broker crashes due to the defect. AMQP protocols 0-10 and 1.0 are not affected.

NVD description

A Denial of Service vulnerability was found in Apache Qpid Broker-J versions 7.0.0-7.0.4 when AMQP protocols 0-8, 0-9 or 0-91 are used to publish messages with size greater than allowed maximum message size limit (100MB by default). The broker crashes due to the defect. AMQP protocols 0-10 and 1.0 are not affected.

References

More vulnerabilities in org.apache.qpid:apache-qpid-broker-j

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

org.apache.qpid:apache-qpid-broker-j

Maven

≥ 7.0.0, < 7.1.0

7.1.0

qpid broker-j

apache

≥ 7.0.0, ≤ 7.0.4

No fix yet

Description

NVD description

More vulnerabilities in org.apache.qpid:apache-qpid-broker-j

See all →