Skip to content

Apache Software Foundation Qpid Broker-j vulnerabilities

apache qpid broker-jApache Qpid Broker-J: Type size/count handling can lead to excessive allocation pre-authentication in the AMQP 0-8/0-9/0-9-1 decoderCVE-2026-925507.5 HighSeptember 25, 2026
apache qpid broker-jApache Qpid Broker-J: Type size/count handling can lead to excessive allocation pre-authentication in the AMQP 0-10 decoderCVE-2026-925607.5 HighSeptember 25, 2026
apache qpid broker-jApache Qpid Broker-J: Uncontrolled resource consumption during AMQP delivery decompression, message conversion and HTTP management JSON renderingCVE-2026-925736.5 MediumSeptember 25, 2026
apache qpid broker-jApache Qpid Broker-J: Unbounded type nesting can lead to stack overflow pre-authentication in AMQP 0-8/0-9/0-9-1 field-table processingCVE-2026-925647.5 HighSeptember 25, 2026
apache qpid broker-jApache Qpid Broker-J: Incomplete property conversion handling from AMQP 1.0 to AMQP 0-10CVE-2026-926087.5 HighSeptember 25, 2026
apache qpid broker-jApache Qpid Broker-J: Missing HTTP-session renewal after successful authenticationCVE-2026-926099.8 CriticalSeptember 25, 2026
apache qpid broker-jApache Qpid Broker-J: Unbounded echo flow responses can lead to denial of serviceCVE-2026-680806.5 MediumAugust 5, 2026
apache qpid broker-jApache Qpid Broker-J: Unable to govern the maximum number of transfer frames per incoming deliveryCVE-2026-680786.5 MediumAugust 5, 2026
apache qpid broker-jApache Qpid Broker-J: Unbounded disposition range handling can lead to denial of serviceCVE-2026-680776.5 MediumAugust 5, 2026
apache qpid broker-jApache Qpid Broker-J: Incoming session flow control window can be exceededCVE-2026-680756.5 MediumAugust 5, 2026
apache qpid broker-jApache Qpid Broker-J: Unbounded type nesting can lead to pre-authentication stack overflowCVE-2026-680737.5 HighAugust 5, 2026
apache qpid broker-jApache Qpid Broker-J: Type size/count handling can lead to excessive allocation pre-authenticationCVE-2026-680607.5 HighAugust 5, 2026
apache qpid broker-jApache Qpid Broker-J: Unbounded symbol value caching can lead to pre-authentication resource exhaustionCVE-2026-680747.5 HighAugust 5, 2026
apache qpid broker-jImproper Input Validation in Apache Qpid Broker-JCVE-2019-0200Fix available7.5 HighMarch 6, 2019
apache qpid broker-jDenial of service vulnerability exists when .NET and .NET Core improperly process XML documentsCVE-2018-8030Fix available7.5 HighJune 19, 2018
apache qpid broker-jModerate severity vulnerability that affects org.apache.qpid:apache-qpid-broker-jCVE-2018-1298Fix available5.9 MediumFebruary 9, 2018
apache qpid broker-jApache Qpid Broker vulnerable to authentication port spoofingCVE-2017-15702Fix available9.8 CriticalDecember 1, 2017
apache qpid broker-jApache Qpid Broker-J vulnerable to Denial of Service (DoS) via uncontrolled resource consumptionCVE-2017-15701Fix available7.5 HighDecember 1, 2017
apache qpid broker-jExposure of Sensitive Information to an Unauthorized Actor in Apache Qpid Broker for JavaCVE-2016-8741Fix available7.5 HighMay 15, 2017