NetSight
medium5.0

CVE-2009-5005

The Cluster::deliveredEvent function in cluster/Cluster.cpp in Apache Qpid, as used in Red Hat Enterprise MRG before 1.3 and other products, allows remote atta…

Impact

The Cluster::deliveredEvent function in cluster/Cluster.cpp in Apache Qpid, as used in Red Hat Enterprise MRG before 1.3 and other products, allows remote attackers to cause a denial of service (daemon crash and cluster outage) via invalid AMQP data.

Affected products

VendorProductAffected versions
ApacheQpid
through 0.5
RedhatEnterprise Mrg
through 1.2.2
Versions 1.0, 1.0.1, 1.0.2, 1.0.3, 1.1.1

References