Apache Qpid Proton-J: Unbounded type nesting can lead to pre-authentication stackoverflow
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 0.4%
exploitation probability
0.4%top 70% of all CVEs
observed exploitation
nono source reports it
A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service.
This issue affects Apache Qpid Proton-J: through 0.34.1.
Users are recommended to upgrade to version 0.35.0, which fixes the issue.
Affected products
Apache Software Foundation · Apache Qpid Proton-J