CVE-2018-8030

CVE-2018-8030: falha em Apache Qpid Broker-J

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Apache Qpid Broker-J+ Monitorar org.apache.qpid:apache-qpid-broker-j

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 3.8%
A Denial of Service vulnerability was found in Apache Qpid Broker-J versions 7.0.0-7.0.4 when AMQP protocols 0-8, 0-9 or 0-91 are used to publish messages with size greater than allowed maximum message size limit (100MB by default). The broker crashes due to the defect. AMQP protocols 0-10 and 1.0 are not affected.
Produtos afetados
Apache Software Foundation · Apache Qpid Broker-J
CVEs relacionadas — Apache Qpid Broker-J

No mesmo produto, das mais perigosas para as menos.

CVE-2016-8741—CVE-2016-8741EPSS 6.4%CVE-2017-15702—CVE-2017-15702EPSS 6.2%CVE-2017-15701—CVE-2017-15701EPSS 4.4%CVE-2019-0200—CVE-2019-0200EPSS 3.8%CVE-2018-1298—CVE-2018-1298EPSS 2.3%CVE-2026-68073HIGHApache Qpid Broker-J: Unbounded type nesting can lead to pre-authentication stack overflowEPSS 0.8%