qpid-proton vulnerabilities (Ubuntu)
11 vulnerabilities.
-
qpid-protonUbuntu Apache Qpid Proton C: Verifying non compliant TLS wildcard cert can cause stack buffer overflow read 7.5 High -
qpid-protonUbuntu Apache Qpid Proton C: Potential authentication bypass: regular AMQP frames can be sent as SASL frames 9.8 Critical -
qpid-protonUbuntu Apache Qpid Proton C: Unbounded recursion in parsing AMQP message bodies can lead to crash 9.8 Critical -
qpid-protonUbuntu Apache Qpid ProtonJ2: Unable to govern the maximum number of transfer frames per incoming delivery 7.5 High -
qpid-protonUbuntu Apache Qpid ProtonJ2: Incoming session flow control window can be exceeded 6.5 Medium -
qpid-protonUbuntu Apache Qpid ProtonJ2: Unbounded type nesting can lead to pre-authentication stackoverflow 7.5 High -
qpid-protonUbuntu Apache Qpid ProtonJ2: Type size/count handling can lead to excessive allocation pre-authentication 7.5 High -
qpid-protonUbuntu Apache Qpid ProtonJ2: Unbounded symbol value caching can lead to pre-authentication resource exhaustion 7.5 High -
qpid-protonUbuntu Withdrawn Advisory: Improper Certificate Validation in Apache Qpid Proton 7.4 High -
qpid-protonUbuntu Improper Certificate Validation in proton-j 7.4 High -
qpid-protonUbuntu Moderate severity vulnerability that affects org.apache.qpid:proton-j 6.5 Medium