En bref
- CVE-2017-15701 est une vulnérabilité ÉLEVÉE (CVSS 7.5) touchant org.apache.qpid:qpid-broker, qpid broker-j (apache).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 4.4%, plus élevée que 91.3% des vulnérabilités.
- Correctif : mettre à jour vers 6.1.5 ou plus récent.
Description
In Apache Qpid Broker-J versions 6.1.0 through 6.1.4 (inclusive) the broker does not properly enforce a maximum frame size in AMQP 1.0 frames. A remote unauthenticated attacker could exploit this to cause the broker to exhaust all available memory and eventually terminate. Older AMQP protocols are not affected.
NVD description
In Apache Qpid Broker-J versions 6.1.0 through 6.1.4 (inclusive) the broker does not properly enforce a maximum frame size in AMQP 1.0 frames. A remote unauthenticated attacker could exploit this to cause the broker to exhaust all available memory and eventually terminate. Older AMQP protocols are not affected.
Autres vulnérabilités de org.apache.qpid:qpid-broker
Tout voir →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free