imPC@ndo IT

Tracker / CVE-2009-5005

CVE-2009-5005

Medium 5.0

The Cluster::deliveredEvent function in cluster/Cluster.cpp in Apache Qpid, as used in Red Hat Enterprise MRG before 1.3 and other products, allows remote attackers to cause a denial of service (daemon crash and cluster outage) via invalid AMQP data.

Affected products and versions

apache qpid · … → 0.5
redhat enterprise_mrg
redhat enterprise_mrg · … → 1.2.2

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References