Every CVE Search/ Get API key

CVE-2009-5006

The SessionAdapter::ExchangeHandlerImpl::checkAlternate function in broker/SessionAdapter.cpp in...

4.0 Medium

The SessionAdapter::ExchangeHandlerImpl::checkAlternate function in broker/SessionAdapter.cpp in the C++ Broker component in Apache Qpid before 0.6, as used in Red Hat Enterprise MRG before 1.3 and other products, allows remote authenticated users to cause a denial of service (NULL pointer dereference, daemon crash, and cluster outage) by attempting to modify the alternate of an exchange.

Exploit likelihood

4.09%Up 2.0 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.0

The SessionAdapter::ExchangeHandlerImpl::checkAlternate function in broker/SessionAdapter.cpp in the C++ Broker component in Apache Qpid before 0.6, as used in Red Hat Enterprise MRG before 1.3 and other products, allows remote authenticated users to cause a denial of service (NULL pointer dereference, daemon crash, and cluster outage) by attempting to modify the alternate of an exchange.

Record
CVE-2009-5006
CVSS 2.0
4.0 MediumAV:N/AC:L/Au:S/C:N/I:N/A:P
Updated
2026-11-02
CVE List No score

The SessionAdapter::ExchangeHandlerImpl::checkAlternate function in broker/SessionAdapter.cpp in the C++ Broker component in Apache Qpid before 0.6, as used in Red Hat Enterprise MRG before 1.3 and other products, allows remote authenticated users to cause a denial of service (NULL pointer dereference, daemon crash, and cluster outage) by attempting to modify the alternate of an exchange.

Record
CVE-2009-5006
Updated
2026-11-02
EUVDEUVD-2009-4968 No score

The SessionAdapter::ExchangeHandlerImpl::checkAlternate function in broker/SessionAdapter.cpp in the C++ Broker component in Apache Qpid before 0.6, as used in Red Hat Enterprise MRG before 1.3 and other products, allows remote authenticated users to cause a denial of service (NULL pointer dereference, daemon crash, and cluster outage) by attempting to modify the alternate of an exchange.

Record
EUVD-2009-4968
Updated
2026-11-03
GitHub AdvisoriesGHSA-8wmw-6vpm-257g No score

The SessionAdapter::ExchangeHandlerImpl::checkAlternate function in broker/SessionAdapter.cpp in...

The SessionAdapter::ExchangeHandlerImpl::checkAlternate function in broker/SessionAdapter.cpp in the C++ Broker component in Apache Qpid before 0.6, as used in Red Hat Enterprise MRG before 1.3 and other products, allows remote authenticated users to cause a denial of service (NULL pointer dereference, daemon crash, and cluster outage) by attempting to modify the alternate of an exchange.

Record
GHSA-8wmw-6vpm-257g
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
PyYAML
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:3.08-5.el5
0:3.08-5.el5
PyYAML-debuginfo
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:3.08-5.el5
0:3.08-5.el5
classads
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:1.0.8-1.el5
0:1.0.8-1.el5
classads-debuginfo
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:1.0.8-1.el5
0:1.0.8-1.el5
classads-devel
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:1.0.8-1.el5
0:1.0.8-1.el5
classads-static
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:1.0.8-1.el5
0:1.0.8-1.el5
condor
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:7.4.4-0.16.el5
0:7.4.4-0.16.el5
condor-debuginfo
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:7.4.4-0.16.el5
0:7.4.4-0.16.el5
condor-ec2-enhanced
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:1.1-1.el5
0:1.1-1.el5
condor-ec2-enhanced-hooks
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:1.1-1.el5
0:1.1-1.el5
Show 104 moreShow less
Affected packages
PackageAffectedFixed
condor-job-hooks
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:1.4-5.el5
0:1.4-5.el5
condor-kbdd
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:7.4.4-0.16.el5
0:7.4.4-0.16.el5
condor-low-latency
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:1.1-0.2.el5
0:1.1-0.2.el5
condor-qmf
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:7.4.4-0.16.el5
0:7.4.4-0.16.el5
condor-vm-gahp
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:7.4.4-0.16.el5
0:7.4.4-0.16.el5
condor-wallaby
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:3.6-6.el5
0:3.6-6.el5
condor-wallaby-base-db
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:1.4-5.el5
0:1.4-5.el5
condor-wallaby-client
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:3.6-6.el5
0:3.6-6.el5
condor-wallaby-tools
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:3.6-6.el5
0:3.6-6.el5
libyaml
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:0.1.2-4.el5
0:0.1.2-4.el5
libyaml-debuginfo
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:0.1.2-4.el5
0:0.1.2-4.el5
libyaml-devel
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:0.1.2-4.el5
0:0.1.2-4.el5
mrg-grid-docs
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:1.3-1.el5
0:1.3-1.el5
mrg-release
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:1.3-2.el5
0:1.3-2.el5
python-condorec2e
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:1.1-1.el5
0:1.1-1.el5
python-condorutils
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:1.4-5.el5
0:1.4-5.el5
python-wallabyclient
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:3.6-6.el5
0:3.6-6.el5
ruby-rhubarb
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:0.2.7-1.el5
0:0.2.7-1.el5
ruby-spqr
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:0.3.2-1.el5
0:0.3.2-1.el5
ruby-sqlite3
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:1.2.4-1.el5
0:1.2.4-1.el5
ruby-sqlite3-debuginfo
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:1.2.4-1.el5
0:1.2.4-1.el5
ruby-wallaby
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:0.9.18-2.el5
0:0.9.18-2.el5
spqr-gen
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:0.3.2-1.el5
0:0.3.2-1.el5
wallaby
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:0.9.18-2.el5
0:0.9.18-2.el5
wallaby-utils
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:0.9.18-2.el5
0:0.9.18-2.el5
cumin
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:0.1.4369-1.el5
0:0.1.4369-1.el5
python-psycopg2
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:2.0.14-2.el5
0:2.0.14-2.el5
python-psycopg2-debuginfo
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:2.0.14-2.el5
0:2.0.14-2.el5
python-psycopg2-doc
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:2.0.14-2.el5
0:2.0.14-2.el5
python-qmf
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:0.7.946106-13.el5
0:0.7.946106-13.el5
python-qpid
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:0.7.946106-14.el5
0:0.7.946106-14.el5
python-saslwrapper
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:0.1.934605-2.el5
0:0.1.934605-2.el5
qmf
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:0.7.946106-17.el5
0:0.7.946106-17.el5
qmf-devel
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:0.7.946106-17.el5
0:0.7.946106-17.el5
qpid-cpp-client
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:0.7.946106-17.el5
0:0.7.946106-17.el5
qpid-cpp-client-devel
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:0.7.946106-17.el5
0:0.7.946106-17.el5
qpid-cpp-client-devel-docs
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:0.7.946106-17.el5
0:0.7.946106-17.el5
qpid-cpp-client-rdma
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:0.7.946106-17.el5
0:0.7.946106-17.el5
qpid-cpp-client-ssl
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:0.7.946106-17.el5
0:0.7.946106-17.el5
qpid-cpp-mrg
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:0.7.946106-17.el5
0:0.7.946106-17.el5
qpid-cpp-mrg-debuginfo
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:0.7.946106-17.el5
0:0.7.946106-17.el5
qpid-cpp-server
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:0.7.946106-17.el5
0:0.7.946106-17.el5
qpid-cpp-server-cluster
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:0.7.946106-17.el5
0:0.7.946106-17.el5
qpid-cpp-server-devel
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:0.7.946106-17.el5
0:0.7.946106-17.el5
qpid-cpp-server-rdma
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:0.7.946106-17.el5
0:0.7.946106-17.el5
qpid-cpp-server-ssl
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:0.7.946106-17.el5
0:0.7.946106-17.el5
qpid-cpp-server-store
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:0.7.946106-17.el5
0:0.7.946106-17.el5
qpid-cpp-server-xml
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:0.7.946106-17.el5
0:0.7.946106-17.el5
qpid-java
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:0.7.946106-11.el5
0:0.7.946106-11.el5
qpid-java-client
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:0.7.946106-11.el5
0:0.7.946106-11.el5
qpid-java-common
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:0.7.946106-11.el5
0:0.7.946106-11.el5
qpid-java-example
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:0.7.946106-11.el5
0:0.7.946106-11.el5
qpid-tests
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:0.7.946106-1.el5
0:0.7.946106-1.el5
qpid-tools
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:0.7.946106-11.el5
0:0.7.946106-11.el5
rh-qpid-cpp-tests
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:0.7.946106-17.el5
0:0.7.946106-17.el5
rhm-docs
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:0.7.946106-8.el5
0:0.7.946106-8.el5
ruby-qmf
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:0.7.946106-17.el5
0:0.7.946106-17.el5
ruby-qpid
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:0.7.946106-2.el5
0:0.7.946106-2.el5
ruby-saslwrapper
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:0.1.934605-2.el5
0:0.1.934605-2.el5
saslwrapper
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:0.1.934605-2.el5
0:0.1.934605-2.el5
saslwrapper-debuginfo
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:0.1.934605-2.el5
0:0.1.934605-2.el5
saslwrapper-devel
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:0.1.934605-2.el5
0:0.1.934605-2.el5
sesame
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:0.7.4297-2.el5
0:0.7.4297-2.el5
sesame-debuginfo
Red Hat:enterprise_mrg:1::el5
From an advisory covering 2 CVEs
before 0:0.7.4297-2.el5
0:0.7.4297-2.el5
classads
Red Hat:enterprise_mrg:1.0::el4
From an advisory covering 2 CVEs
before 0:1.0.8-1.el4
0:1.0.8-1.el4
classads-debuginfo
Red Hat:enterprise_mrg:1.0::el4
From an advisory covering 2 CVEs
before 0:1.0.8-1.el4
0:1.0.8-1.el4
classads-devel
Red Hat:enterprise_mrg:1.0::el4
From an advisory covering 2 CVEs
before 0:1.0.8-1.el4
0:1.0.8-1.el4
classads-static
Red Hat:enterprise_mrg:1.0::el4
From an advisory covering 2 CVEs
before 0:1.0.8-1.el4
0:1.0.8-1.el4
condor
Red Hat:enterprise_mrg:1.0::el4
From an advisory covering 2 CVEs
before 0:7.4.4-0.16.el4
0:7.4.4-0.16.el4
condor-debuginfo
Red Hat:enterprise_mrg:1.0::el4
From an advisory covering 2 CVEs
before 0:7.4.4-0.16.el4
0:7.4.4-0.16.el4
condor-job-hooks
Red Hat:enterprise_mrg:1.0::el4
From an advisory covering 2 CVEs
before 0:1.4-5.el4
0:1.4-5.el4
condor-kbdd
Red Hat:enterprise_mrg:1.0::el4
From an advisory covering 2 CVEs
before 0:7.4.4-0.16.el4
0:7.4.4-0.16.el4
condor-low-latency
Red Hat:enterprise_mrg:1.0::el4
From an advisory covering 2 CVEs
before 0:1.1-0.2.el4
0:1.1-0.2.el4
condor-qmf
Red Hat:enterprise_mrg:1.0::el4
From an advisory covering 2 CVEs
before 0:7.4.4-0.16.el4
0:7.4.4-0.16.el4
condor-wallaby
Red Hat:enterprise_mrg:1.0::el4
From an advisory covering 2 CVEs
before 0:3.6-6.el4
0:3.6-6.el4
condor-wallaby-client
Red Hat:enterprise_mrg:1.0::el4
From an advisory covering 2 CVEs
before 0:3.6-6.el4
0:3.6-6.el4
mrg-grid-docs
Red Hat:enterprise_mrg:1.0::el4
From an advisory covering 2 CVEs
before 0:1.3-1.el4
0:1.3-1.el4
mrg-release
Red Hat:enterprise_mrg:1.0::el4
From an advisory covering 2 CVEs
before 0:1.3-2.el4
0:1.3-2.el4
python-condorutils
Red Hat:enterprise_mrg:1.0::el4
From an advisory covering 2 CVEs
before 0:1.4-5.el4
0:1.4-5.el4
python-qmf
Red Hat:enterprise_mrg:1.0::el4
From an advisory covering 2 CVEs
before 0:0.7.946106-13.el4
0:0.7.946106-13.el4
python-qpid
Red Hat:enterprise_mrg:1.0::el4
From an advisory covering 2 CVEs
before 0:0.7.946106-14.el4
0:0.7.946106-14.el4
qmf
Red Hat:enterprise_mrg:1.0::el4
From an advisory covering 2 CVEs
before 0:0.7.946106-17.el4
0:0.7.946106-17.el4
qmf-devel
Red Hat:enterprise_mrg:1.0::el4
From an advisory covering 2 CVEs
before 0:0.7.946106-17.el4
0:0.7.946106-17.el4
qpid-cpp-client
Red Hat:enterprise_mrg:1.0::el4
From an advisory covering 2 CVEs
before 0:0.7.946106-17.el4
0:0.7.946106-17.el4
qpid-cpp-client-devel
Red Hat:enterprise_mrg:1.0::el4
From an advisory covering 2 CVEs
before 0:0.7.946106-17.el4
0:0.7.946106-17.el4
qpid-cpp-client-devel-docs
Red Hat:enterprise_mrg:1.0::el4
From an advisory covering 2 CVEs
before 0:0.7.946106-17.el4
0:0.7.946106-17.el4
qpid-cpp-client-ssl
Red Hat:enterprise_mrg:1.0::el4
From an advisory covering 2 CVEs
before 0:0.7.946106-17.el4
0:0.7.946106-17.el4
qpid-cpp-mrg
Red Hat:enterprise_mrg:1.0::el4
From an advisory covering 2 CVEs
before 0:0.7.946106-17.el4
0:0.7.946106-17.el4
qpid-cpp-mrg-debuginfo
Red Hat:enterprise_mrg:1.0::el4
From an advisory covering 2 CVEs
before 0:0.7.946106-17.el4
0:0.7.946106-17.el4
qpid-cpp-server
Red Hat:enterprise_mrg:1.0::el4
From an advisory covering 2 CVEs
before 0:0.7.946106-17.el4
0:0.7.946106-17.el4
qpid-cpp-server-devel
Red Hat:enterprise_mrg:1.0::el4
From an advisory covering 2 CVEs
before 0:0.7.946106-17.el4
0:0.7.946106-17.el4
qpid-cpp-server-ssl
Red Hat:enterprise_mrg:1.0::el4
From an advisory covering 2 CVEs
before 0:0.7.946106-17.el4
0:0.7.946106-17.el4
qpid-cpp-server-store
Red Hat:enterprise_mrg:1.0::el4
From an advisory covering 2 CVEs
before 0:0.7.946106-17.el4
0:0.7.946106-17.el4
qpid-cpp-server-xml
Red Hat:enterprise_mrg:1.0::el4
From an advisory covering 2 CVEs
before 0:0.7.946106-17.el4
0:0.7.946106-17.el4
qpid-java
Red Hat:enterprise_mrg:1.0::el4
From an advisory covering 2 CVEs
before 0:0.7.946106-11.el4
0:0.7.946106-11.el4
qpid-java-client
Red Hat:enterprise_mrg:1.0::el4
From an advisory covering 2 CVEs
before 0:0.7.946106-11.el4
0:0.7.946106-11.el4
qpid-java-common
Red Hat:enterprise_mrg:1.0::el4
From an advisory covering 2 CVEs
before 0:0.7.946106-11.el4
0:0.7.946106-11.el4
qpid-java-example
Red Hat:enterprise_mrg:1.0::el4
From an advisory covering 2 CVEs
before 0:0.7.946106-11.el4
0:0.7.946106-11.el4
qpid-tests
Red Hat:enterprise_mrg:1.0::el4
From an advisory covering 2 CVEs
before 0:0.7.946106-1.el4
0:0.7.946106-1.el4
qpid-tools
Red Hat:enterprise_mrg:1.0::el4
From an advisory covering 2 CVEs
before 0:0.7.946106-11.el4
0:0.7.946106-11.el4
rh-qpid-cpp-tests
Red Hat:enterprise_mrg:1.0::el4
From an advisory covering 2 CVEs
before 0:0.7.946106-17.el4
0:0.7.946106-17.el4
rhm-docs
Red Hat:enterprise_mrg:1.0::el4
From an advisory covering 2 CVEs
before 0:0.7.946106-8.el4
0:0.7.946106-8.el4
sesame
Red Hat:enterprise_mrg:1.0::el4
From an advisory covering 2 CVEs
before 0:0.7.4297-3.el4
0:0.7.4297-3.el4
sesame-debuginfo
Red Hat:enterprise_mrg:1.0::el4
From an advisory covering 2 CVEs
before 0:0.7.4297-3.el4
0:0.7.4297-3.el4

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2009-5006 is a medium vulnerability (CVSS 4.0) in Apache Qpid, published October 18, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.09%, the 90th percentile. No source names a fixed version.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 12 references. The JSON record has them.

MoveEnter Open