Veille CVE

Recherche « Apache qpid broker-j »

6 CVE

Critique 1 Élevée 4 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Apache qpid broker-j » ✕
  1. CVE-2026-92573 6.5 Moyenne

    Apache Software Foundation Apache Qpid Broker-J · Apache qpid broker-j

    Improper handling of compressed data in the shared GZIP decompressor used for AMQP 0-8/0-9/0-9-1 and AMQP 0-10 message delivery, message conversion and HTTP management JSON rendering allows authenticated message producers to exhaust memory and disrupt broker availability via processing without a decompressed-output limit. This issue affects Apache Qpid Broker-J: through 10.1.0. Users are recommended to upgrade to version 10.1.1, which fixes the issue.

  2. CVE-2026-92564 7.5 Élevée

    Apache Software Foundation Apache Qpid Broker-J · Apache qpid broker-j

    A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qpid Broker-J: through 10.1.0. Users are recommended to upgrade to version 10.1.1, which fixes the issue.

  3. CVE-2026-92560 7.5 Élevée

    Apache Software Foundation Apache Qpid Broker-J · Apache qpid broker-j

    A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects Apache Qpid Broker-J: through 10.1.0. Users are recommended to upgrade to version 10.1.1, which fixes the issue.

  4. CVE-2026-92550 7.5 Élevée

    Apache Software Foundation Apache Qpid Broker-J · Apache qpid broker-j

    A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects Apache Qpid Broker-J: through 10.1.0. Users are recommended to upgrade to version 10.1.1, which fixes the issue.

  5. CVE-2026-92609 9.8 Critique

    Apache Software Foundation Apache Qpid Broker-J · Apache qpid broker-j

    Session fixation in HTTP management authentication allows remote attackers to gain unauthorized access to an authenticated management session via reuse of a session identifier retained across successful authentication. This issue affects Apache Qpid Broker-J: through 10.1.0. Users are recommended to upgrade to version 10.1.1, which fixes the issue.

  6. CVE-2026-92608 7.5 Élevée

    Apache Software Foundation Apache Qpid Broker-J · Apache qpid broker-j

    Improper handling of property-encoding exceptions in AMQP 1.0-to-AMQP 0-10 message conversion allows authenticated message producers to disrupt delivery to AMQP 0-10 consumers via message properties that the target encoder does not handle correctly. This issue affects Apache Qpid Broker-J: through 10.1.0. Users are recommended to upgrade to version 10.1.1, which fixes the issue.