CVE-2012-4460
published 2013-03-14CVE-2012-4460: The serializing/deserializing functions in the qpid::framing::Buffer class in Apache Qpid 0.20 and earlier allow remote attackers to cause a denial of service…
PriorityP421medium5CVSS 2.0
AVNACLAuNCNINAP
EPSS
3.18%
86.6th percentile
The serializing/deserializing functions in the qpid::framing::Buffer class in Apache Qpid 0.20 and earlier allow remote attackers to cause a denial of service (assertion failure and daemon exit) via unspecified vectors. NOTE: this issue could also trigger an out-of-bounds read, but it might not trigger a crash.
Affected
16 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache | qpid | <= 0.20 | — |
| apache | qpid | — | — |
| apache | qpid | — | — |
| apache | qpid | — | — |
| apache | qpid | — | — |
| apache | qpid | — | — |
| apache | qpid | — | — |
| apache | qpid | — | — |
| apache | qpid | — | — |
| apache | qpid | — | — |
| apache | qpid | — | — |
| apache | qpid | — | — |
| apache | qpid | — | — |
| apache | qpid | — | — |
| apache | qpid | — | — |
| apache | qpid | — | — |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv5.0MEDIUM
vendor_redhat5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-ph25-q4qw-rp97: The serializing/deserializing functions in the qpid::framing::Buffer class in Apache Qpid 0
ghsa_unreviewed·2022-05-17
CVE-2012-4460 [MEDIUM] CWE-119 GHSA-ph25-q4qw-rp97: The serializing/deserializing functions in the qpid::framing::Buffer class in Apache Qpid 0
The serializing/deserializing functions in the qpid::framing::Buffer class in Apache Qpid 0.20 and earlier allow remote attackers to cause a denial of service (assertion failure and daemon exit) via unspecified vectors. NOTE: this issue could also trigger an out-of-bounds read, but it might not trigger a crash.
OSV
CVE-2012-4460: The serializing/deserializing functions in the qpid::framing::Buffer class in Apache Qpid 0
osv·2013-03-14·CVSS 5.0
CVE-2012-4460 [MEDIUM] CVE-2012-4460: The serializing/deserializing functions in the qpid::framing::Buffer class in Apache Qpid 0
The serializing/deserializing functions in the qpid::framing::Buffer class in Apache Qpid 0.20 and earlier allow remote attackers to cause a denial of service (assertion failure and daemon exit) via unspecified vectors. NOTE: this issue could also trigger an out-of-bounds read, but it might not trigger a crash.
Red Hat
qpid-cpp: lack of bounds checking in qpid::framing::Buffer can lead to DoS if asserts are enabled
vendor_redhat·2013-03-05·CVSS 5.0
CVE-2012-4460 [MEDIUM] qpid-cpp: lack of bounds checking in qpid::framing::Buffer can lead to DoS if asserts are enabled
qpid-cpp: lack of bounds checking in qpid::framing::Buffer can lead to DoS if asserts are enabled
The serializing/deserializing functions in the qpid::framing::Buffer class in Apache Qpid 0.20 and earlier allow remote attackers to cause a denial of service (assertion failure and daemon exit) via unspecified vectors. NOTE: this issue could also trigger an out-of-bounds read, but it might not trigger a crash.
Statement: Not vulnerable. This issue did not affect the versions of qpid-cpp as shipped with Red Hat Enterprise MRG as asserts are not enabled.
Package: qpid-cpp (Red Hat Enterprise Linux 6) - Not affected
Package: qpid-cpp (Red Hat Enterprise MRG 1) - Not affected
Package: qpid-cpp (Red Hat Enterprise MRG 2) - Not affected
No detection rules found.
No public exploits indexed.
http://svn.apache.org/viewvc?view=revision&revision=1453031https://bugzilla.redhat.com/show_bug.cgi?id=861242https://issues.apache.org/jira/browse/QPID-4629https://issues.apache.org/jira/issues/?jql=fixVersion%20%3D%20%220.21%22%20AND%20project%20%3D%20QPIDhttp://svn.apache.org/viewvc?view=revision&revision=1453031https://bugzilla.redhat.com/show_bug.cgi?id=861242https://issues.apache.org/jira/browse/QPID-4629https://issues.apache.org/jira/issues/?jql=fixVersion%20%3D%20%220.21%22%20AND%20project%20%3D%20QPID
2013-03-14
Published