Apache Qpid ProtonJ2 vulnerabilities
4 known vulnerabilities in Apache Qpid ProtonJ2 from Apache. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
Apache Qpid ProtonJ2: Allocation of Resources Without Limits or Throttling
It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial of service. This issue affects Apache Qpid ProtonJ2: through 1.1.0. Users are r
- 7.5 High severity
Apache Qpid ProtonJ2: Uncontrolled Recursion
A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qpid ProtonJ2: through 1.1.0. Users are recommended to upgrade to version 1.2.0, which fixes the issue.
- 7.5 High severity
Apache Qpid ProtonJ2: Memory Allocation with Excessive Size Value
A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects Apache Qpid ProtonJ2: through 1.1.0. Users are recommended to upgrade to version 1.2.0, which fixes t
- 7.5 High severity
Apache Qpid ProtonJ2: Allocation of Resources Without Limits or Throttling
A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service. This issue affects Apache Qpid ProtonJ2: through 1.1.0. Users are recommended to upgrade to version 1.2.0, which fixes the is