CVE-2026-67592highCWE-770

CVE-2026-67592: fallo de gravedad alta en Apache Qpid ProtonJ2

Apache Qpid ProtonJ2: Unable to govern the maximum number of transfer frames per incoming delivery

Publicada el

Seguir esta CVE+ Monitorear Apache Qpid ProtonJ2

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 7.5epss 0.7%
It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial of service. This issue affects Apache Qpid ProtonJ2: through 1.1.0. Users are recommended to upgrade to version 1.2.0, which fixes the issue
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Productos afectados
Apache Software Foundation · Apache Qpid ProtonJ2
CVEs relacionadas — Apache Qpid ProtonJ2

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-67590HIGHApache Qpid ProtonJ2: Unbounded type nesting can lead to pre-authentication stackoverflowEPSS 0.8%CVE-2026-67589HIGHApache Qpid ProtonJ2: Type size/count handling can lead to excessive allocation pre-authenticationEPSS 0.8%CVE-2026-67588HIGHApache Qpid ProtonJ2: Unbounded symbol value caching can lead to pre-authentication resource exhaustionEPSS 0.8%CVE-2026-67591MEDIUMApache Qpid ProtonJ2: Incoming session flow control window can be exceededEPSS 0.7%