{"id":"CVE-2012-4459","aliases":["EUVD-2012-4388","GHSA-f4gr-qh9c-r8fg","RHSA-2013:0561","RHSA-2013:0562","UBUNTU-CVE-2012-4459"],"status":"published","title":"Integer overflow in the qpid::framing::Buffer::checkAvailable function in Apache Qpid 0.20 and...","description":"Integer overflow in the qpid::framing::Buffer::checkAvailable function in Apache Qpid 0.20 and earlier allows remote attackers to cause a denial of service (crash) via a crafted message, which triggers an out-of-bounds read.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.09212,"percentile":0.95375,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-189"],"published":"2013-03-12T15:00:00Z","modified":"2026-06-28T10:07:38Z","affected":[{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"mrg-release","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.0-1.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"cumin-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.1-2.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"python-qpid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-4.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"python-qpid-qmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-15.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"python-saslwrapper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-1.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-cpp-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-cpp-client-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-cpp-client-devel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-cpp-client-rdma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-cpp-client-ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-cpp-mrg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-cpp-mrg-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-cpp-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-cpp-server-cluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-cpp-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-cpp-server-rdma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-cpp-server-ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-cpp-server-store","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-cpp-server-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-7.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-java-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-7.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-java-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-7.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-java-example","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-7.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-jca","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-8.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-jca-xarecovery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-8.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-qmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-15.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-qmf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-15.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-qmf-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-15.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-2.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-8.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"rhm-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-2.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"ruby-qpid-qmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-15.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"ruby-saslwrapper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-1.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"saslwrapper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-1.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"saslwrapper-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-1.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"saslwrapper-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-1.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"mrg-release","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.0-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"python-qpid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-4.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"python-qpid-qmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-15.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"python-saslwrapper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-1.el6_3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"qpid-cpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"qpid-cpp-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"qpid-cpp-client-ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"qpid-cpp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"qpid-cpp-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"qpid-cpp-server-ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"qpid-qmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-15.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"qpid-qmf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-15.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"qpid-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-2.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"qpid-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-8.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"ruby-qpid-qmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-15.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"ruby-saslwrapper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-1.el6_3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.7-2.1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.16-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"saslwrapper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-1.el6_3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"saslwrapper-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-1.el6_3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"saslwrapper-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-1.el6_3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"xerces-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-20.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"xerces-c-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-20.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"xerces-c-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-20.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"xerces-c-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-20.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"xqilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-8.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"xqilla-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-8.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"xqilla-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-8.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"xqilla-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-8.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"mrg-release","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.0-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.7-2.1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.16-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"cumin-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.1-2.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"python-qpid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-4.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"python-qpid-qmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-15.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"python-saslwrapper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-1.el6_3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-cpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-cpp-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-cpp-client-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-cpp-client-devel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-cpp-client-rdma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-cpp-client-ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-cpp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-cpp-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-cpp-server-cluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-cpp-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-cpp-server-rdma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-cpp-server-ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-cpp-server-store","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-cpp-server-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-7.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-java-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-7.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-java-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-7.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-java-example","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-7.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-jca","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-8.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-jca-xarecovery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-8.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-qmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-15.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-qmf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-15.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-qmf-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-15.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-2.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-8.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rhm-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-2.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"ruby-qpid-qmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-15.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"ruby-saslwrapper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-1.el6_3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"saslwrapper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-1.el6_3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"saslwrapper-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-1.el6_3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"saslwrapper-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-1.el6_3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"xerces-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-20.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"xerces-c-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-20.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"xerces-c-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-20.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"xerces-c-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-20.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"xqilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-8.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"xqilla-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-8.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"xqilla-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-8.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"xqilla-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-8.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"qpid-cpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.16-9build1","0.16-9ubuntu1","0.16-9ubuntu2"]}],"products":[{"vendor":"apache","product":"qpid"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=861241","tags":["x_refsource_MISC","x_transferred","report"]},{"url":"https://issues.apache.org/jira/issues/?jql=fixVersion%20%3D%20%220.21%22%20AND%20project%20%3D%20QPID","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0561.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://issues.apache.org/jira/browse/QPID-4629","tags":["x_refsource_CONFIRM","x_transferred","article"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0562.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://svn.apache.org/viewvc?view=revision\u0026revision=1453031","tags":["x_refsource_CONFIRM","x_transferred","Patch"]},{"url":"http://secunia.com/advisories/52516","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-4459","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-f4gr-qh9c-r8fg"},{"url":"https://access.redhat.com/errata/RHSA-2013:0561","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_MRG/2/html/Technical_Notes/RHSA-2013-0561.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=678612","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=710787","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=720714","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=737685","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=740485","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=754990","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=773719","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=781496","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=782806","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=783215","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=784957","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=786555","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=790004","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=800912","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=801605","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=804752","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=813742","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=814356","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=834256","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=836141","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=846465","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=849788","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=849790","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=851355","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=856299","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=860011","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=861234","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=861838","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=866677","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=868403","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=868881","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=870058","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=871774","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=876193","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=876664","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=877081","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=877553","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=882243","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=884036","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=888392","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=893980","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=895535","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0561.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-4446","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-4446","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-4446","tags":["advisory"]},{"url":"https://issues.apache.org/jira/browse/QPID-4631","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-4458","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-4458","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-4458","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-4459","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-4459","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2013:0562","tags":["advisory"]},{"url":"https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_MRG/2/html/Technical_Notes/RHSA-2013-0562.html","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0562.json","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2012-4459","tags":["report"]},{"url":"https://rhn.redhat.com/errata/RHSA-2013-0561.html","tags":["report"]},{"url":"https://issues.apache.org/jira/browse/QPID-4629?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2012-4459","description":"Integer overflow in the qpid::framing::Buffer::checkAvailable function in Apache Qpid 0.20 and earlier allows remote attackers to cause a denial of service (crash) via a crafted message, which triggers an out-of-bounds read.","status":"published","published":"2013-03-12T15:00:00Z","modified":"2024-09-16T17:27:46.678Z","updated_at":"2026-11-02T14:34:51.584538Z"}],"euvd":[{"id":"EUVD-2012-4388","description":"Integer overflow in the qpid::framing::Buffer::checkAvailable function in Apache Qpid 0.20 and earlier allows remote attackers to cause a denial of service (crash) via a crafted message, which triggers an out-of-bounds read.","status":"published","published":"2013-03-12T15:00:00Z","modified":"2024-09-16T17:27:46Z","updated_at":"2026-11-03T00:55:41.925187Z"}],"ghsa":[{"id":"GHSA-f4gr-qh9c-r8fg","title":"Integer overflow in the qpid::framing::Buffer::checkAvailable function in Apache Qpid 0.20 and...","description":"Integer overflow in the qpid::framing::Buffer::checkAvailable function in Apache Qpid 0.20 and earlier allows remote attackers to cause a denial of service (crash) via a crafted message, which triggers an out-of-bounds read.","status":"published","published":"2022-05-17T05:13:24Z","modified":"2023-01-28T05:03:44Z","updated_at":"2026-11-02T14:44:02.066384Z"}],"nvd":[{"id":"CVE-2012-4459","description":"Integer overflow in the qpid::framing::Buffer::checkAvailable function in Apache Qpid 0.20 and earlier allows remote attackers to cause a denial of service (crash) via a crafted message, which triggers an out-of-bounds read.","status":"published","published":"2013-03-14T03:10:23.377Z","modified":"2026-06-16T23:45:08.467Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-189"],"updated_at":"2026-11-02T14:02:17.375282Z"}],"osv":[{"id":"RHSA-2013:0561","title":"Red Hat Security Advisory: Red Hat Enterprise MRG Messaging 2.3 security update","status":"published","published":"2024-09-22T16:06:30Z","modified":"2026-06-28T10:07:38Z","updated_at":"2026-11-02T15:53:01.993625Z"},{"id":"RHSA-2013:0562","title":"Red Hat Security Advisory: Red Hat Enterprise MRG Messaging 2.3 security update","status":"published","published":"2024-09-22T16:06:36Z","modified":"2026-06-28T10:07:38Z","updated_at":"2026-11-02T15:53:01.993625Z"},{"id":"UBUNTU-CVE-2012-4459","description":"Integer overflow in the qpid::framing::Buffer::checkAvailable function in Apache Qpid 0.20 and earlier allows remote attackers to cause a denial of service (crash) via a crafted message, which triggers an out-of-bounds read.","status":"published","published":"2013-03-14T03:10:00Z","modified":"2026-04-22T09:18:05.096655Z","updated_at":"2026-11-02T15:54:06.854805Z"}]}}