Vulnerability in Apache Qpid

CVE-2012-2145

Apache Qpid 0.17 and earlier does not properly restrict incoming client connections, which allows remote attackers to cause a denial of service (file descriptor consumption) via a large number of incomplete connections.

EPSS: 0.042 (89.9th percentile) — read the EPSS interpretation.

Affected products

  • Apache Qpid — versions 0.6, 0.7, 0.8
  • N/a — versions n/a

Weakness classification (CWE)

References