CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2012-4458

The AMQP type decoder in Apache Qpid 0.20 and earlier allows remote attackers to cause a denial of service (memory consumption and server crash) via a large number of zero width elements in the client-properties map in a connection.start-ok message.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.026

EPSS Ranking 85.2%

CVSS Severity

CVSS v2 Score 5.0

References

Products affected by CVE-2012-4458

Apache » Qpid » Version: 0.10

cpe:2.3:a:apache:qpid:0.10
Apache » Qpid » Version: 0.11

cpe:2.3:a:apache:qpid:0.11
Apache » Qpid » Version: 0.12

cpe:2.3:a:apache:qpid:0.12
Apache » Qpid » Version: 0.13

cpe:2.3:a:apache:qpid:0.13
Apache » Qpid » Version: 0.14

cpe:2.3:a:apache:qpid:0.14
Apache » Qpid » Version: 0.15

cpe:2.3:a:apache:qpid:0.15
Apache » Qpid » Version: 0.16

cpe:2.3:a:apache:qpid:0.16
Apache » Qpid » Version: 0.17

cpe:2.3:a:apache:qpid:0.17
Apache » Qpid » Version: 0.18

cpe:2.3:a:apache:qpid:0.18
Apache » Qpid » Version: 0.19

cpe:2.3:a:apache:qpid:0.19
Apache » Qpid » Version: 0.20

cpe:2.3:a:apache:qpid:0.20
Apache » Qpid » Version: 0.5

cpe:2.3:a:apache:qpid:0.5
Apache » Qpid » Version: 0.6

cpe:2.3:a:apache:qpid:0.6
Apache » Qpid » Version: 0.7

cpe:2.3:a:apache:qpid:0.7
Apache » Qpid » Version: 0.8

cpe:2.3:a:apache:qpid:0.8
Apache » Qpid » Version: 0.9

cpe:2.3:a:apache:qpid:0.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2012-4458

Products

Pricing

Contact Us