CVE-2012-2145
Apache Qpid 0.17 and earlier does not properly restrict incoming client connections, which allows...
5.0 MediumFix available
Apache Qpid 0.17 and earlier does not properly restrict incoming client connections, which allows remote attackers to cause a denial of service (file descriptor consumption) via a large number of incomplete connections.
Exploit likelihood
4.24%Up 0.5 points since Feb 4, 2022
What each source reports
NVD Score used
Apache Qpid 0.17 and earlier does not properly restrict incoming client connections, which allows remote attackers to cause a denial of service (file descriptor consumption) via a large number of incomplete connections.
- Record
CVE-2012-2145- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
Apache Qpid 0.17 and earlier does not properly restrict incoming client connections, which allows remote attackers to cause a denial of service (file descriptor consumption) via a large number of incomplete connections.
- Record
CVE-2012-2145- Updated
- 2026-11-02
EUVDEUVD-2012-2141 No score
Apache Qpid 0.17 and earlier does not properly restrict incoming client connections, which allows remote attackers to cause a denial of service (file descriptor consumption) via a large number of incomplete connections.
- Record
EUVD-2012-2141- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-f936-v965-g74r No score
Apache Qpid 0.17 and earlier does not properly restrict incoming client connections, which allows...
Apache Qpid 0.17 and earlier does not properly restrict incoming client connections, which allows remote attackers to cause a denial of service (file descriptor consumption) via a large number of incomplete connections.
- Record
GHSA-f936-v965-g74r- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
python-qpidRed Hat:enterprise_linux:6::client |
before 0:0.14-11.el6_3 | 0:0.14-11.el6_3 |
python-qpid-qmfRed Hat:enterprise_linux:6::client |
before 0:0.14-14.el6_3 | 0:0.14-14.el6_3 |
qpid-cppRed Hat:enterprise_linux:6::client |
before 0:0.14-22.el6_3 | 0:0.14-22.el6_3 |
qpid-cpp-clientRed Hat:enterprise_linux:6::client |
before 0:0.14-22.el6_3 | 0:0.14-22.el6_3 |
qpid-cpp-client-sslRed Hat:enterprise_linux:6::client |
before 0:0.14-22.el6_3 | 0:0.14-22.el6_3 |
qpid-cpp-debuginfoRed Hat:enterprise_linux:6::client |
before 0:0.14-22.el6_3 | 0:0.14-22.el6_3 |
qpid-cpp-serverRed Hat:enterprise_linux:6::client |
before 0:0.14-22.el6_3 | 0:0.14-22.el6_3 |
qpid-cpp-server-sslRed Hat:enterprise_linux:6::client |
before 0:0.14-22.el6_3 | 0:0.14-22.el6_3 |
qpid-qmfRed Hat:enterprise_linux:6::client |
before 0:0.14-14.el6_3 | 0:0.14-14.el6_3 |
qpid-qmf-debuginfoRed Hat:enterprise_linux:6::client |
before 0:0.14-14.el6_3 | 0:0.14-14.el6_3 |
Show 66 moreShow less
| Package | Affected | Fixed |
|---|---|---|
qpid-toolsRed Hat:enterprise_linux:6::client |
before 0:0.14-6.el6_3 | 0:0.14-6.el6_3 |
ruby-qpid-qmfRed Hat:enterprise_linux:6::client |
before 0:0.14-14.el6_3 | 0:0.14-14.el6_3 |
python-qpidRed Hat:enterprise_linux:6::computenode |
before 0:0.14-11.el6_3 | 0:0.14-11.el6_3 |
python-qpid-qmfRed Hat:enterprise_linux:6::computenode |
before 0:0.14-14.el6_3 | 0:0.14-14.el6_3 |
qpid-cppRed Hat:enterprise_linux:6::computenode |
before 0:0.14-22.el6_3 | 0:0.14-22.el6_3 |
qpid-cpp-clientRed Hat:enterprise_linux:6::computenode |
before 0:0.14-22.el6_3 | 0:0.14-22.el6_3 |
qpid-cpp-client-sslRed Hat:enterprise_linux:6::computenode |
before 0:0.14-22.el6_3 | 0:0.14-22.el6_3 |
qpid-cpp-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:0.14-22.el6_3 | 0:0.14-22.el6_3 |
qpid-cpp-serverRed Hat:enterprise_linux:6::computenode |
before 0:0.14-22.el6_3 | 0:0.14-22.el6_3 |
qpid-cpp-server-sslRed Hat:enterprise_linux:6::computenode |
before 0:0.14-22.el6_3 | 0:0.14-22.el6_3 |
qpid-qmfRed Hat:enterprise_linux:6::computenode |
before 0:0.14-14.el6_3 | 0:0.14-14.el6_3 |
qpid-qmf-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:0.14-14.el6_3 | 0:0.14-14.el6_3 |
qpid-toolsRed Hat:enterprise_linux:6::computenode |
before 0:0.14-6.el6_3 | 0:0.14-6.el6_3 |
ruby-qpid-qmfRed Hat:enterprise_linux:6::computenode |
before 0:0.14-14.el6_3 | 0:0.14-14.el6_3 |
python-qpidRed Hat:enterprise_linux:6::server |
before 0:0.14-11.el6_3 | 0:0.14-11.el6_3 |
python-qpid-qmfRed Hat:enterprise_linux:6::server |
before 0:0.14-14.el6_3 | 0:0.14-14.el6_3 |
qpid-cppRed Hat:enterprise_linux:6::server |
before 0:0.14-22.el6_3 | 0:0.14-22.el6_3 |
qpid-cpp-clientRed Hat:enterprise_linux:6::server |
before 0:0.14-22.el6_3 | 0:0.14-22.el6_3 |
qpid-cpp-client-sslRed Hat:enterprise_linux:6::server |
before 0:0.14-22.el6_3 | 0:0.14-22.el6_3 |
qpid-cpp-debuginfoRed Hat:enterprise_linux:6::server |
before 0:0.14-22.el6_3 | 0:0.14-22.el6_3 |
qpid-cpp-serverRed Hat:enterprise_linux:6::server |
before 0:0.14-22.el6_3 | 0:0.14-22.el6_3 |
qpid-cpp-server-sslRed Hat:enterprise_linux:6::server |
before 0:0.14-22.el6_3 | 0:0.14-22.el6_3 |
qpid-qmfRed Hat:enterprise_linux:6::server |
before 0:0.14-14.el6_3 | 0:0.14-14.el6_3 |
qpid-qmf-debuginfoRed Hat:enterprise_linux:6::server |
before 0:0.14-14.el6_3 | 0:0.14-14.el6_3 |
qpid-toolsRed Hat:enterprise_linux:6::server |
before 0:0.14-6.el6_3 | 0:0.14-6.el6_3 |
ruby-qpid-qmfRed Hat:enterprise_linux:6::server |
before 0:0.14-14.el6_3 | 0:0.14-14.el6_3 |
python-qpidRed Hat:enterprise_linux:6::workstation |
before 0:0.14-11.el6_3 | 0:0.14-11.el6_3 |
python-qpid-qmfRed Hat:enterprise_linux:6::workstation |
before 0:0.14-14.el6_3 | 0:0.14-14.el6_3 |
qpid-cppRed Hat:enterprise_linux:6::workstation |
before 0:0.14-22.el6_3 | 0:0.14-22.el6_3 |
qpid-cpp-clientRed Hat:enterprise_linux:6::workstation |
before 0:0.14-22.el6_3 | 0:0.14-22.el6_3 |
qpid-cpp-client-sslRed Hat:enterprise_linux:6::workstation |
before 0:0.14-22.el6_3 | 0:0.14-22.el6_3 |
qpid-cpp-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:0.14-22.el6_3 | 0:0.14-22.el6_3 |
qpid-cpp-serverRed Hat:enterprise_linux:6::workstation |
before 0:0.14-22.el6_3 | 0:0.14-22.el6_3 |
qpid-cpp-server-sslRed Hat:enterprise_linux:6::workstation |
before 0:0.14-22.el6_3 | 0:0.14-22.el6_3 |
qpid-qmfRed Hat:enterprise_linux:6::workstation |
before 0:0.14-14.el6_3 | 0:0.14-14.el6_3 |
qpid-qmf-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:0.14-14.el6_3 | 0:0.14-14.el6_3 |
qpid-toolsRed Hat:enterprise_linux:6::workstation |
before 0:0.14-6.el6_3 | 0:0.14-6.el6_3 |
ruby-qpid-qmfRed Hat:enterprise_linux:6::workstation |
before 0:0.14-14.el6_3 | 0:0.14-14.el6_3 |
mrg-releaseRed Hat:enterprise_mrg:2::el5 From an advisory covering 2 CVEs |
before 0:2.2.0-1.el5 | 0:2.2.0-1.el5 |
python-qpidRed Hat:enterprise_mrg:2::el5 From an advisory covering 2 CVEs |
before 0:0.14-11.el5 | 0:0.14-11.el5 |
python-qpid-qmfRed Hat:enterprise_mrg:2::el5 From an advisory covering 2 CVEs |
before 0:0.14-14.el5 | 0:0.14-14.el5 |
qpid-cpp-clientRed Hat:enterprise_mrg:2::el5 From an advisory covering 2 CVEs |
before 0:0.14-22.el5 | 0:0.14-22.el5 |
qpid-cpp-client-develRed Hat:enterprise_mrg:2::el5 From an advisory covering 2 CVEs |
before 0:0.14-22.el5 | 0:0.14-22.el5 |
qpid-cpp-client-devel-docsRed Hat:enterprise_mrg:2::el5 From an advisory covering 2 CVEs |
before 0:0.14-22.el5 | 0:0.14-22.el5 |
qpid-cpp-client-rdmaRed Hat:enterprise_mrg:2::el5 From an advisory covering 2 CVEs |
before 0:0.14-22.el5 | 0:0.14-22.el5 |
qpid-cpp-client-sslRed Hat:enterprise_mrg:2::el5 From an advisory covering 2 CVEs |
before 0:0.14-22.el5 | 0:0.14-22.el5 |
qpid-cpp-mrgRed Hat:enterprise_mrg:2::el5 From an advisory covering 2 CVEs |
before 0:0.14-22.el5 | 0:0.14-22.el5 |
qpid-cpp-mrg-debuginfoRed Hat:enterprise_mrg:2::el5 From an advisory covering 2 CVEs |
before 0:0.14-22.el5 | 0:0.14-22.el5 |
qpid-cpp-serverRed Hat:enterprise_mrg:2::el5 From an advisory covering 2 CVEs |
before 0:0.14-22.el5 | 0:0.14-22.el5 |
qpid-cpp-server-clusterRed Hat:enterprise_mrg:2::el5 From an advisory covering 2 CVEs |
before 0:0.14-22.el5 | 0:0.14-22.el5 |
qpid-cpp-server-develRed Hat:enterprise_mrg:2::el5 From an advisory covering 2 CVEs |
before 0:0.14-22.el5 | 0:0.14-22.el5 |
qpid-cpp-server-rdmaRed Hat:enterprise_mrg:2::el5 From an advisory covering 2 CVEs |
before 0:0.14-22.el5 | 0:0.14-22.el5 |
qpid-cpp-server-sslRed Hat:enterprise_mrg:2::el5 From an advisory covering 2 CVEs |
before 0:0.14-22.el5 | 0:0.14-22.el5 |
qpid-cpp-server-storeRed Hat:enterprise_mrg:2::el5 From an advisory covering 2 CVEs |
before 0:0.14-22.el5 | 0:0.14-22.el5 |
qpid-cpp-server-xmlRed Hat:enterprise_mrg:2::el5 From an advisory covering 2 CVEs |
before 0:0.14-22.el5 | 0:0.14-22.el5 |
qpid-javaRed Hat:enterprise_mrg:2::el5 From an advisory covering 2 CVEs |
before 0:0.18-2.el5 | 0:0.18-2.el5 |
qpid-java-clientRed Hat:enterprise_mrg:2::el5 From an advisory covering 2 CVEs |
before 0:0.18-2.el5 | 0:0.18-2.el5 |
qpid-java-commonRed Hat:enterprise_mrg:2::el5 From an advisory covering 2 CVEs |
before 0:0.18-2.el5 | 0:0.18-2.el5 |
qpid-java-exampleRed Hat:enterprise_mrg:2::el5 From an advisory covering 2 CVEs |
before 0:0.18-2.el5 | 0:0.18-2.el5 |
qpid-jcaRed Hat:enterprise_mrg:2::el5 From an advisory covering 2 CVEs |
before 0:0.18-2.el5 | 0:0.18-2.el5 |
qpid-jca-xarecoveryRed Hat:enterprise_mrg:2::el5 From an advisory covering 2 CVEs |
before 0:0.18-2.el5 | 0:0.18-2.el5 |
qpid-qmfRed Hat:enterprise_mrg:2::el5 From an advisory covering 2 CVEs |
before 0:0.14-14.el5 | 0:0.14-14.el5 |
qpid-qmf-debuginfoRed Hat:enterprise_mrg:2::el5 From an advisory covering 2 CVEs |
before 0:0.14-14.el5 | 0:0.14-14.el5 |
qpid-qmf-develRed Hat:enterprise_mrg:2::el5 From an advisory covering 2 CVEs |
before 0:0.14-14.el5 | 0:0.14-14.el5 |
qpid-toolsRed Hat:enterprise_mrg:2::el5 From an advisory covering 2 CVEs |
before 0:0.14-6.el5 | 0:0.14-6.el5 |
ruby-qpid-qmfRed Hat:enterprise_mrg:2::el5 From an advisory covering 2 CVEs |
before 0:0.14-14.el5 | 0:0.14-14.el5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-2145 is a medium vulnerability (CVSS 5.0) in Apache Qpid, published September 28, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.24%, the 91st percentile. Fixed in python-qpid 0:0.14-11.el6_3.
References
issues.apache.org/jira/browse/QPID-4021
rhn.redhat.com/errata/RHSA-2012-1277.html
secunia.com/advisories/50699
exchange.xforce.ibmcloud.com/vulnerabilities/78730
Show 23 moreShow less
securityfocus.com/bid/55608
bugzilla.redhat.com/show_bug.cgi?id=817175
nvd.nist.gov/vuln/detail/CVE-2012-2145
github.com/advisories/GHSA-f936-v965-g74r
access.redhat.com/errata/RHSA-2012:1269
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1269.json
cve.org/CVERecord?id=CVE-2012-2145