CVE-2012-4459

Integer overflow in the qpid::framing::Buffer::checkAvailable function in Apache Qpid 0.20 and...

5.0 MediumFix available

CVE-2012-4459 is a medium vulnerability (CVSS 5.0) in Apache Qpid, published March 12, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 9.21%, the 95th percentile. Fixed in mrg-release 0:2.3.0-1.el5.

Integer overflow in the qpid::framing::Buffer::checkAvailable function in Apache Qpid 0.20 and earlier allows remote attackers to cause a denial of service (crash) via a crafted message, which triggers an out-of-bounds read.

Exploit likelihood

9.21%Up 7.1 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

Record: CVE-2012-4459
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness: CWE-189
Updated: 2026-11-02

CVE List No score

Record: CVE-2012-4459
Updated: 2026-11-02

EUVDEUVD-2012-4388 No score

Record: EUVD-2012-4388
Updated: 2026-11-03

GitHub AdvisoriesGHSA-f4gr-qh9c-r8fg No score

Integer overflow in the qpid::framing::Buffer::checkAvailable function in Apache Qpid 0.20 and...

Record: GHSA-f4gr-qh9c-r8fg
Updated: 2026-11-02

OSVUBUNTU-CVE-2012-4459 No score

Record: UBUNTU-CVE-2012-4459
Updated: 2026-11-02

Affected products

apache qpid

Affected packages

Affected packages
Package	Affected	Fixed
`mrg-release` Red Hat:enterprise_mrg:2::el5	before 0:2.3.0-1.el5	0:2.3.0-1.el5
`cumin-messaging` Red Hat:enterprise_mrg:2::el5	before 0:0.1.1-2.el5	0:0.1.1-2.el5
`python-qpid` Red Hat:enterprise_mrg:2::el5	before 0:0.18-4.el5	0:0.18-4.el5
`python-qpid-qmf` Red Hat:enterprise_mrg:2::el5	before 0:0.18-15.el5	0:0.18-15.el5
`python-saslwrapper` Red Hat:enterprise_mrg:2::el5	before 0:0.18-1.el5	0:0.18-1.el5
`qpid-cpp-client` Red Hat:enterprise_mrg:2::el5	before 0:0.18-14.el5	0:0.18-14.el5
`qpid-cpp-client-devel` Red Hat:enterprise_mrg:2::el5	before 0:0.18-14.el5	0:0.18-14.el5
`qpid-cpp-client-devel-docs` Red Hat:enterprise_mrg:2::el5	before 0:0.18-14.el5	0:0.18-14.el5
`qpid-cpp-client-rdma` Red Hat:enterprise_mrg:2::el5	before 0:0.18-14.el5	0:0.18-14.el5
`qpid-cpp-client-ssl` Red Hat:enterprise_mrg:2::el5	before 0:0.18-14.el5	0:0.18-14.el5

Show 102 moreShow less

Affected packages
Package	Affected	Fixed
`qpid-cpp-mrg` Red Hat:enterprise_mrg:2::el5	before 0:0.18-14.el5	0:0.18-14.el5
`qpid-cpp-mrg-debuginfo` Red Hat:enterprise_mrg:2::el5	before 0:0.18-14.el5	0:0.18-14.el5
`qpid-cpp-server` Red Hat:enterprise_mrg:2::el5	before 0:0.18-14.el5	0:0.18-14.el5
`qpid-cpp-server-cluster` Red Hat:enterprise_mrg:2::el5	before 0:0.18-14.el5	0:0.18-14.el5
`qpid-cpp-server-devel` Red Hat:enterprise_mrg:2::el5	before 0:0.18-14.el5	0:0.18-14.el5
`qpid-cpp-server-rdma` Red Hat:enterprise_mrg:2::el5	before 0:0.18-14.el5	0:0.18-14.el5
`qpid-cpp-server-ssl` Red Hat:enterprise_mrg:2::el5	before 0:0.18-14.el5	0:0.18-14.el5
`qpid-cpp-server-store` Red Hat:enterprise_mrg:2::el5	before 0:0.18-14.el5	0:0.18-14.el5
`qpid-cpp-server-xml` Red Hat:enterprise_mrg:2::el5	before 0:0.18-14.el5	0:0.18-14.el5
`qpid-java` Red Hat:enterprise_mrg:2::el5	before 0:0.18-7.el5	0:0.18-7.el5
`qpid-java-client` Red Hat:enterprise_mrg:2::el5	before 0:0.18-7.el5	0:0.18-7.el5
`qpid-java-common` Red Hat:enterprise_mrg:2::el5	before 0:0.18-7.el5	0:0.18-7.el5
`qpid-java-example` Red Hat:enterprise_mrg:2::el5	before 0:0.18-7.el5	0:0.18-7.el5
`qpid-jca` Red Hat:enterprise_mrg:2::el5	before 0:0.18-8.el5	0:0.18-8.el5
`qpid-jca-xarecovery` Red Hat:enterprise_mrg:2::el5	before 0:0.18-8.el5	0:0.18-8.el5
`qpid-qmf` Red Hat:enterprise_mrg:2::el5	before 0:0.18-15.el5	0:0.18-15.el5
`qpid-qmf-debuginfo` Red Hat:enterprise_mrg:2::el5	before 0:0.18-15.el5	0:0.18-15.el5
`qpid-qmf-devel` Red Hat:enterprise_mrg:2::el5	before 0:0.18-15.el5	0:0.18-15.el5
`qpid-tests` Red Hat:enterprise_mrg:2::el5	before 0:0.18-2.el5	0:0.18-2.el5
`qpid-tools` Red Hat:enterprise_mrg:2::el5	before 0:0.18-8.el5	0:0.18-8.el5
`rhm-docs` Red Hat:enterprise_mrg:2::el5	before 0:0.18-2.el5	0:0.18-2.el5
`ruby-qpid-qmf` Red Hat:enterprise_mrg:2::el5	before 0:0.18-15.el5	0:0.18-15.el5
`ruby-saslwrapper` Red Hat:enterprise_mrg:2::el5	before 0:0.18-1.el5	0:0.18-1.el5
`saslwrapper` Red Hat:enterprise_mrg:2::el5	before 0:0.18-1.el5	0:0.18-1.el5
`saslwrapper-debuginfo` Red Hat:enterprise_mrg:2::el5	before 0:0.18-1.el5	0:0.18-1.el5
`saslwrapper-devel` Red Hat:enterprise_mrg:2::el5	before 0:0.18-1.el5	0:0.18-1.el5
`mrg-release` Red Hat:enterprise_mrg:2:computenode:el6	before 0:2.3.0-1.el6	0:2.3.0-1.el6
`python-qpid` Red Hat:enterprise_mrg:2:computenode:el6	before 0:0.18-4.el6	0:0.18-4.el6
`python-qpid-qmf` Red Hat:enterprise_mrg:2:computenode:el6	before 0:0.18-15.el6	0:0.18-15.el6
`python-saslwrapper` Red Hat:enterprise_mrg:2:computenode:el6	before 0:0.18-1.el6_3	0:0.18-1.el6_3
`qpid-cpp` Red Hat:enterprise_mrg:2:computenode:el6	before 0:0.18-14.el6	0:0.18-14.el6
`qpid-cpp-client` Red Hat:enterprise_mrg:2:computenode:el6	before 0:0.18-14.el6	0:0.18-14.el6
`qpid-cpp-client-ssl` Red Hat:enterprise_mrg:2:computenode:el6	before 0:0.18-14.el6	0:0.18-14.el6
`qpid-cpp-debuginfo` Red Hat:enterprise_mrg:2:computenode:el6	before 0:0.18-14.el6	0:0.18-14.el6
`qpid-cpp-server` Red Hat:enterprise_mrg:2:computenode:el6	before 0:0.18-14.el6	0:0.18-14.el6
`qpid-cpp-server-ssl` Red Hat:enterprise_mrg:2:computenode:el6	before 0:0.18-14.el6	0:0.18-14.el6
`qpid-qmf` Red Hat:enterprise_mrg:2:computenode:el6	before 0:0.18-15.el6	0:0.18-15.el6
`qpid-qmf-debuginfo` Red Hat:enterprise_mrg:2:computenode:el6	before 0:0.18-15.el6	0:0.18-15.el6
`qpid-tests` Red Hat:enterprise_mrg:2:computenode:el6	before 0:0.18-2.el6	0:0.18-2.el6
`qpid-tools` Red Hat:enterprise_mrg:2:computenode:el6	before 0:0.18-8.el6	0:0.18-8.el6
`ruby-qpid-qmf` Red Hat:enterprise_mrg:2:computenode:el6	before 0:0.18-15.el6	0:0.18-15.el6
`ruby-saslwrapper` Red Hat:enterprise_mrg:2:computenode:el6	before 0:0.18-1.el6_3	0:0.18-1.el6_3
`rubygem-rake` Red Hat:enterprise_mrg:2:computenode:el6	before 0:0.8.7-2.1.el6	0:0.8.7-2.1.el6
`rubygems` Red Hat:enterprise_mrg:2:computenode:el6	before 0:1.8.16-1.el6	0:1.8.16-1.el6
`saslwrapper` Red Hat:enterprise_mrg:2:computenode:el6	before 0:0.18-1.el6_3	0:0.18-1.el6_3
`saslwrapper-debuginfo` Red Hat:enterprise_mrg:2:computenode:el6	before 0:0.18-1.el6_3	0:0.18-1.el6_3
`saslwrapper-devel` Red Hat:enterprise_mrg:2:computenode:el6	before 0:0.18-1.el6_3	0:0.18-1.el6_3
`xerces-c` Red Hat:enterprise_mrg:2:computenode:el6	before 0:3.0.1-20.el6	0:3.0.1-20.el6
`xerces-c-debuginfo` Red Hat:enterprise_mrg:2:computenode:el6	before 0:3.0.1-20.el6	0:3.0.1-20.el6
`xerces-c-devel` Red Hat:enterprise_mrg:2:computenode:el6	before 0:3.0.1-20.el6	0:3.0.1-20.el6
`xerces-c-doc` Red Hat:enterprise_mrg:2:computenode:el6	before 0:3.0.1-20.el6	0:3.0.1-20.el6
`xqilla` Red Hat:enterprise_mrg:2:computenode:el6	before 0:2.2.3-8.el6	0:2.2.3-8.el6
`xqilla-debuginfo` Red Hat:enterprise_mrg:2:computenode:el6	before 0:2.2.3-8.el6	0:2.2.3-8.el6
`xqilla-devel` Red Hat:enterprise_mrg:2:computenode:el6	before 0:2.2.3-8.el6	0:2.2.3-8.el6
`xqilla-doc` Red Hat:enterprise_mrg:2:computenode:el6	before 0:2.2.3-8.el6	0:2.2.3-8.el6
`mrg-release` Red Hat:enterprise_mrg:2:server:el6	before 0:2.3.0-1.el6	0:2.3.0-1.el6
`rubygem-rake` Red Hat:enterprise_mrg:2:server:el6	before 0:0.8.7-2.1.el6	0:0.8.7-2.1.el6
`rubygems` Red Hat:enterprise_mrg:2:server:el6	before 0:1.8.16-1.el6	0:1.8.16-1.el6
`cumin-messaging` Red Hat:enterprise_mrg:2:server:el6	before 0:0.1.1-2.el6	0:0.1.1-2.el6
`python-qpid` Red Hat:enterprise_mrg:2:server:el6	before 0:0.18-4.el6	0:0.18-4.el6
`python-qpid-qmf` Red Hat:enterprise_mrg:2:server:el6	before 0:0.18-15.el6	0:0.18-15.el6
`python-saslwrapper` Red Hat:enterprise_mrg:2:server:el6	before 0:0.18-1.el6_3	0:0.18-1.el6_3
`qpid-cpp` Red Hat:enterprise_mrg:2:server:el6	before 0:0.18-14.el6	0:0.18-14.el6
`qpid-cpp-client` Red Hat:enterprise_mrg:2:server:el6	before 0:0.18-14.el6	0:0.18-14.el6
`qpid-cpp-client-devel` Red Hat:enterprise_mrg:2:server:el6	before 0:0.18-14.el6	0:0.18-14.el6
`qpid-cpp-client-devel-docs` Red Hat:enterprise_mrg:2:server:el6	before 0:0.18-14.el6	0:0.18-14.el6
`qpid-cpp-client-rdma` Red Hat:enterprise_mrg:2:server:el6	before 0:0.18-14.el6	0:0.18-14.el6
`qpid-cpp-client-ssl` Red Hat:enterprise_mrg:2:server:el6	before 0:0.18-14.el6	0:0.18-14.el6
`qpid-cpp-debuginfo` Red Hat:enterprise_mrg:2:server:el6	before 0:0.18-14.el6	0:0.18-14.el6
`qpid-cpp-server` Red Hat:enterprise_mrg:2:server:el6	before 0:0.18-14.el6	0:0.18-14.el6
`qpid-cpp-server-cluster` Red Hat:enterprise_mrg:2:server:el6	before 0:0.18-14.el6	0:0.18-14.el6
`qpid-cpp-server-devel` Red Hat:enterprise_mrg:2:server:el6	before 0:0.18-14.el6	0:0.18-14.el6
`qpid-cpp-server-rdma` Red Hat:enterprise_mrg:2:server:el6	before 0:0.18-14.el6	0:0.18-14.el6
`qpid-cpp-server-ssl` Red Hat:enterprise_mrg:2:server:el6	before 0:0.18-14.el6	0:0.18-14.el6
`qpid-cpp-server-store` Red Hat:enterprise_mrg:2:server:el6	before 0:0.18-14.el6	0:0.18-14.el6
`qpid-cpp-server-xml` Red Hat:enterprise_mrg:2:server:el6	before 0:0.18-14.el6	0:0.18-14.el6
`qpid-java` Red Hat:enterprise_mrg:2:server:el6	before 0:0.18-7.el6	0:0.18-7.el6
`qpid-java-client` Red Hat:enterprise_mrg:2:server:el6	before 0:0.18-7.el6	0:0.18-7.el6
`qpid-java-common` Red Hat:enterprise_mrg:2:server:el6	before 0:0.18-7.el6	0:0.18-7.el6
`qpid-java-example` Red Hat:enterprise_mrg:2:server:el6	before 0:0.18-7.el6	0:0.18-7.el6
`qpid-jca` Red Hat:enterprise_mrg:2:server:el6	before 0:0.18-8.el6	0:0.18-8.el6
`qpid-jca-xarecovery` Red Hat:enterprise_mrg:2:server:el6	before 0:0.18-8.el6	0:0.18-8.el6
`qpid-qmf` Red Hat:enterprise_mrg:2:server:el6	before 0:0.18-15.el6	0:0.18-15.el6
`qpid-qmf-debuginfo` Red Hat:enterprise_mrg:2:server:el6	before 0:0.18-15.el6	0:0.18-15.el6
`qpid-qmf-devel` Red Hat:enterprise_mrg:2:server:el6	before 0:0.18-15.el6	0:0.18-15.el6
`qpid-tests` Red Hat:enterprise_mrg:2:server:el6	before 0:0.18-2.el6	0:0.18-2.el6
`qpid-tools` Red Hat:enterprise_mrg:2:server:el6	before 0:0.18-8.el6	0:0.18-8.el6
`rhm-docs` Red Hat:enterprise_mrg:2:server:el6	before 0:0.18-2.el6	0:0.18-2.el6
`ruby-qpid-qmf` Red Hat:enterprise_mrg:2:server:el6	before 0:0.18-15.el6	0:0.18-15.el6
`ruby-saslwrapper` Red Hat:enterprise_mrg:2:server:el6	before 0:0.18-1.el6_3	0:0.18-1.el6_3
`saslwrapper` Red Hat:enterprise_mrg:2:server:el6	before 0:0.18-1.el6_3	0:0.18-1.el6_3
`saslwrapper-debuginfo` Red Hat:enterprise_mrg:2:server:el6	before 0:0.18-1.el6_3	0:0.18-1.el6_3
`saslwrapper-devel` Red Hat:enterprise_mrg:2:server:el6	before 0:0.18-1.el6_3	0:0.18-1.el6_3
`xerces-c` Red Hat:enterprise_mrg:2:server:el6	before 0:3.0.1-20.el6	0:3.0.1-20.el6
`xerces-c-debuginfo` Red Hat:enterprise_mrg:2:server:el6	before 0:3.0.1-20.el6	0:3.0.1-20.el6
`xerces-c-devel` Red Hat:enterprise_mrg:2:server:el6	before 0:3.0.1-20.el6	0:3.0.1-20.el6
`xerces-c-doc` Red Hat:enterprise_mrg:2:server:el6	before 0:3.0.1-20.el6	0:3.0.1-20.el6
`xqilla` Red Hat:enterprise_mrg:2:server:el6	before 0:2.2.3-8.el6	0:2.2.3-8.el6
`xqilla-debuginfo` Red Hat:enterprise_mrg:2:server:el6	before 0:2.2.3-8.el6	0:2.2.3-8.el6
`xqilla-devel` Red Hat:enterprise_mrg:2:server:el6	before 0:2.2.3-8.el6	0:2.2.3-8.el6
`xqilla-doc` Red Hat:enterprise_mrg:2:server:el6	before 0:2.2.3-8.el6	0:2.2.3-8.el6
`qpid-cpp` Ubuntu:16.04:LTS	All versions, plus listed versions 0.16-9build10.16-9ubuntu10.16-9ubuntu2	None known

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References

Show 63 moreShow less