CVEDB API

Vulnerability Details CVE-2019-0223

While investigating bug PROTON-2014, we discovered that under some circumstances Apache Qpid Proton versions 0.9 to 0.27.0 (C library and its language bindings) can connect to a peer anonymously using TLS *even when configured to verify the peer certificate* while used with OpenSSL versions before 1.1.0. This means that an undetected man in the middle attack could be constructed if an attacker can arrange to intercept TLS traffic.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.005

EPSS Ranking 62.5%

CVSS Severity

CVSS v3 Score 7.4

CVSS v2 Score 5.8

References

Products affected by CVE-2019-0223

Apache » Qpid » Version: 0.10

cpe:2.3:a:apache:qpid:0.10
Apache » Qpid » Version: 0.11

cpe:2.3:a:apache:qpid:0.11
Apache » Qpid » Version: 0.12

cpe:2.3:a:apache:qpid:0.12
Apache » Qpid » Version: 0.13

cpe:2.3:a:apache:qpid:0.13
Apache » Qpid » Version: 0.14

cpe:2.3:a:apache:qpid:0.14
Apache » Qpid » Version: 0.15

cpe:2.3:a:apache:qpid:0.15
Apache » Qpid » Version: 0.16

cpe:2.3:a:apache:qpid:0.16
Apache » Qpid » Version: 0.17

cpe:2.3:a:apache:qpid:0.17
Apache » Qpid » Version: 0.18

cpe:2.3:a:apache:qpid:0.18
Apache » Qpid » Version: 0.19

cpe:2.3:a:apache:qpid:0.19
Apache » Qpid » Version: 0.20

cpe:2.3:a:apache:qpid:0.20
Apache » Qpid » Version: 0.22

cpe:2.3:a:apache:qpid:0.22
Apache » Qpid » Version: 0.27.0

cpe:2.3:a:apache:qpid:0.27.0
Apache » Qpid » Version: 0.9

cpe:2.3:a:apache:qpid:0.9
Redhat » Jboss Amq Clients 2 » Version: N/A

cpe:2.3:a:redhat:jboss_amq_clients_2:-
Redhat » Openstack » Version: 13

cpe:2.3:a:redhat:openstack:13
Redhat » Openstack » Version: 14

cpe:2.3:a:redhat:openstack:14
Redhat » Satellite » Version: 6.3

cpe:2.3:a:redhat:satellite:6.3
Redhat » Satellite » Version: 6.4

cpe:2.3:a:redhat:satellite:6.4
Redhat » Satellite » Version: 6.5

cpe:2.3:a:redhat:satellite:6.5
Redhat » Enterprise Linux Desktop » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_desktop:6.0
Redhat » Enterprise Linux Desktop » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0
Redhat » Enterprise Linux Eus » Version: 6.7

cpe:2.3:o:redhat:enterprise_linux_eus:6.7
Redhat » Enterprise Linux Eus » Version: 7.2

cpe:2.3:o:redhat:enterprise_linux_eus:7.2
Redhat » Enterprise Linux Eus » Version: 7.3

cpe:2.3:o:redhat:enterprise_linux_eus:7.3
Redhat » Enterprise Linux Eus » Version: 7.4

cpe:2.3:o:redhat:enterprise_linux_eus:7.4
Redhat » Enterprise Linux Eus » Version: 7.5

cpe:2.3:o:redhat:enterprise_linux_eus:7.5
Redhat » Enterprise Linux Eus » Version: 7.6

cpe:2.3:o:redhat:enterprise_linux_eus:7.6
Redhat » Enterprise Linux Server » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_server:6.0
Redhat » Enterprise Linux Server » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_server:7.0
Redhat » Enterprise Linux Server Aus » Version: 5.9

cpe:2.3:o:redhat:enterprise_linux_server_aus:5.9
Redhat » Enterprise Linux Server Aus » Version: 6.4

cpe:2.3:o:redhat:enterprise_linux_server_aus:6.4
Redhat » Enterprise Linux Server Aus » Version: 6.5

cpe:2.3:o:redhat:enterprise_linux_server_aus:6.5
Redhat » Enterprise Linux Server Aus » Version: 6.6

cpe:2.3:o:redhat:enterprise_linux_server_aus:6.6
Redhat » Enterprise Linux Server Aus » Version: 7.2

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2
Redhat » Enterprise Linux Server Aus » Version: 7.3

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3
Redhat » Enterprise Linux Server Aus » Version: 7.4

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4
Redhat » Enterprise Linux Server Aus » Version: 7.6

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6
Redhat » Enterprise Linux Server Tus » Version: 7.2

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2
Redhat » Enterprise Linux Server Tus » Version: 7.3

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3
Redhat » Enterprise Linux Server Tus » Version: 7.4

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4
Redhat » Enterprise Linux Server Tus » Version: 7.6

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6
Redhat » Enterprise Linux Workstation » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_workstation:6.0
Redhat » Enterprise Linux Workstation » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0
Redhat » Linux » Version: 6.0

cpe:2.3:o:redhat:linux:6.0
Redhat » Linux » Version: 7.0

cpe:2.3:o:redhat:linux:7.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-0223

Products

Pricing

Contact Us