Denial of Service Vulnerability in Apache Qpid 0.30 and Earlier

Denial of Service Vulnerability in Apache Qpid 0.30 and Earlier

CVE-2015-0203 · MEDIUM Severity

AV:N/AC:L/AU:S/C:N/I:N/A:P

The qpidd broker in Apache Qpid 0.30 and earlier allows remote authenticated users to cause a denial of service (daemon crash) via an AMQP message with (1) an invalid range in a sequence set, (2) content-bearing methods other than message-transfer, or (3) a session-gap control before a corresponding session-attach.

Learn more about our Cis Benchmark Audit For Apache Http Server.