Approved changes feed: RSS · Atom

cpe:2.3:a:apache:qpid_proton:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductQpid Proton (286b0e92-3110-558a-8581-400a2c65453d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:apache/qpid purl2cpe 2026-06-01 10:14:28.823291
pkg:deb/debian/qpid-proton purl2cpe 2026-06-01 10:14:28.823295
pkg:deb/ubuntu/qpid-proton purl2cpe 2026-06-01 10:14:28.823297
pkg:github/apache/qpid-proton purl2cpe 2026-06-01 10:14:28.823300
pkg:gitlab/redhat/qpid-proton purl2cpe 2026-06-01 10:14:28.823303
pkg:maven/org.apache.qpid/proton purl2cpe 2026-06-01 10:14:28.823305
pkg:pypi/python-qpid-proton purl2cpe 2026-06-01 10:14:28.823308
pkg:rpm/fedora/qpid-proton purl2cpe 2026-06-01 10:14:28.823311
pkg:rpm/opensuse/qpid-proton purl2cpe 2026-06-01 10:14:28.823313

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-2166 vulnerable 2026-06-08 05:07:33.481720 Details available
The (1) proton.reactor.Connector, (2) proton.reactor.Container, and (3) proton.utils.BlockingConnection classes in Apache Qpid Proton before 0.12.1 improperly use an unencrypted connection for an amqps URI scheme when SSL support is unavailable, which might allow man-in-the-middle attackers to obtain sensitive information or modify data via unspecified vectors.
Published: 2016-04-12T14:00:00.000Z
Updated: 2024-08-05T23:17:50.750Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.