The AMQP type decoder in Apache Qpid 0.20 and earlier allows remote attackers to cause a denial of service (memory consumption and server crash) via a large number of zero width elements in the client-properties map in a connection.start-ok message.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2013-03-13 20:10
Updated : 2013-03-19 09:49
NVD link : CVE-2012-4458
Mitre link : CVE-2012-4458
JSON object : View
CWE
CWE-189
Numeric Errors
Products Affected
apache
- qpid