CVE-2026-67592highCWE-770

CVE-2026-67592: falha de alta gravidade em Apache Qpid ProtonJ2

Apache Qpid ProtonJ2: Unable to govern the maximum number of transfer frames per incoming delivery

Publicada em

Seguir esta CVE+ Monitorar Apache Qpid ProtonJ2

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.5epss 0.7%
It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial of service. This issue affects Apache Qpid ProtonJ2: through 1.1.0. Users are recommended to upgrade to version 1.2.0, which fixes the issue
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Produtos afetados
Apache Software Foundation · Apache Qpid ProtonJ2
CVEs relacionadas — Apache Qpid ProtonJ2

No mesmo produto, das mais perigosas para as menos.

CVE-2026-67590HIGHApache Qpid ProtonJ2: Unbounded type nesting can lead to pre-authentication stackoverflowEPSS 0.8%CVE-2026-67589HIGHApache Qpid ProtonJ2: Type size/count handling can lead to excessive allocation pre-authenticationEPSS 0.8%CVE-2026-67588HIGHApache Qpid ProtonJ2: Unbounded symbol value caching can lead to pre-authentication resource exhaustionEPSS 0.8%CVE-2026-67591MEDIUMApache Qpid ProtonJ2: Incoming session flow control window can be exceededEPSS 0.7%