VYPR

Maven package

org.apache.qpid/apache-qpid-broker-j

pkg:maven/org.apache.qpid/apache-qpid-broker-j

Vulnerabilities (3)

  • CVE-2019-0200Mar 6, 2019
    affected < 7.0.7fixed 7.0.7

    A Denial of Service vulnerability was found in Apache Qpid Broker-J versions 6.0.0-7.0.6 (inclusive) and 7.1.0 which allows an unauthenticated attacker to crash the broker instance by sending specially crafted commands using AMQP protocol versions below 1.0 (AMQP 0-8, 0-9, 0-91 a

  • CVE-2018-8030Jun 19, 2018
    affected >= 7.0.0, < 7.1.0fixed 7.1.0

    A Denial of Service vulnerability was found in Apache Qpid Broker-J versions 7.0.0-7.0.4 when AMQP protocols 0-8, 0-9 or 0-91 are used to publish messages with size greater than allowed maximum message size limit (100MB by default). The broker crashes due to the defect. AMQP prot

  • CVE-2018-1298Feb 9, 2018
    affected >= 7.0.0, < 7.0.1fixed 7.0.1

    A Denial of Service vulnerability was found in Apache Qpid Broker-J 7.0.0 in functionality for authentication of connections for AMQP protocols 0-8, 0-9, 0-91 and 0-10 when PLAIN or XOAUTH2 SASL mechanism is used. The vulnerability allows unauthenticated attacker to crash the bro