NetSight
IP …
medium5.0

CVE-2012-4458

The AMQP type decoder in Apache Qpid 0.20 and earlier allows remote attackers to cause a denial of service (memory consumption and server crash) via a large nu…

Impact

The AMQP type decoder in Apache Qpid 0.20 and earlier allows remote attackers to cause a denial of service (memory consumption and server crash) via a large number of zero width elements in the client-properties map in a connection.start-ok message.

Affected products

VendorProductAffected versions
ApacheQpid
through 0.20
Versions 0.5, 0.6, 0.7, 0.8, 0.9

Weakness classification

CWE-189

References