CVE-2026-66277

概要

参考情報

• lists.apache.org/thread/48tflr3sx0sxq9bcdy5rh06oy3gmwx02 · Mailing List
• openwall.com/lists/oss-security/2026/08/04/13 · Mailing List

qpid proton-j のその他の脆弱性

• CVE-2026-66276中 6.5An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessive CPU usage due to naive range handling…
• CVE-2026-66275中 6.5An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service. This issue affect…
• CVE-2026-66274高 7.5A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issu…
• CVE-2026-66273高 7.5A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. …
• CVE-2026-66257高 7.5A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service. This…