Apache Qpid CVE-2012-4460 Denial of Service Vulnerability

Bugtraq ID:	58378
Class:	Boundary Condition Error
CVE:	CVE-2012-4460
Remote:	Yes
Local:	No
Published:	Mar 05 2013 12:00AM
Updated:	Mar 14 2013 07:35PM
Credit:	Florian Weimer, Red Hat Product Security Team
Vulnerable:
Not Vulnerable:

Apache Qpid CVE-2012-4460 Denial of Service Vulnerability

Apache Qpid is prone to a denial-of-service vulnerability.

Successful exploit of this allows an attacker to crash the application, resulting in denial-of-service conditions.

Apache Qpid CVE-2012-4460 Denial of Service Vulnerability

An attacker can use readily available tools to exploit this issue.

Apache Qpid CVE-2012-4460 Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Apache Qpid CVE-2012-4460 Denial of Service Vulnerability

References:

• CVE-2012-4460 qpid-cpp: lack of bounds checking in qpid::framing::Buffer can lea (Red Hat)
  
• Qpid Homepage (Apache)
  
• QPID-4629 Improve validation of received amqp 0-10 frames (Apache)