CVE-2026-115942highCWE-125

CVE-2026-115942: fallo de gravedad alta en Apache Qpid Proton C

Apache Qpid Proton C: Verifying non compliant TLS wildcard cert can cause stack buffer overflow read

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Apache Qpid Proton C+ Monitorear qpid-proton

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 7.5epss 0.2%
A misconfigured wildcard TLS certificate causes a stack read overflow. This issue does not affect any wildcard certificate issued to the RFC9525 standard - the fix only accepts certificates that comply to this standard. This issue affects Apache Qpid Proton C: through 0.40.0. Users are recommended to upgrade to version 0.41.1, which fixes the issue.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Productos afectados
Apache Software Foundation · Apache Qpid Proton C
CVEs relacionadas — Apache Qpid Proton C

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-114230CRITICALApache Qpid Proton C: Potential authentication bypass: regular AMQP frames can be sent as SASL framesEPSS 0.5%CVE-2026-105042CRITICALApache Qpid Proton C: Unbounded recursion in parsing AMQP message bodies can lead to crashEPSS 0.5%CVE-2026-105031CRITICALApache Qpid Proton C: The OpenSSL TLS implementation adds a locally trusted certificate authority to the existing trusted system trust anchors.EPSS 0.3%