Approved changes feed: RSS · Atom

cpe:2.3:a:apache_software_foundation:apache_qpid_broker-j:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorApache Software Foundation (f563070d-e18f-561b-b86c-987936937e8a)
ProductApache Qpid Broker J (dd851884-6c07-5881-be57-17389e8f26ab)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-68080 vulnerable 2026-09-16 04:34:00.463473 Apache Qpid Broker-J: Unbounded echo flow responses can lead to denial of service
It was not possible to govern the rate at which the broker would respond to an echo flow, enabling an authenticated attacker to cause excessive resource usage and potential denial of service. This issue affects Apache Qpid Broker-J: through 10.0.1. Users are recommended to upgrade to version 10.1.0, which fixes the issue.
Published: 2026-08-05T05:51:22.557Z
Updated: 2026-08-05T14:58:48.703Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-68075 vulnerable 2026-09-16 04:34:00.385146 Apache Qpid Broker-J: Incoming session flow control window can be exceeded
An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service. This issue affects Apache Qpid Broker-J: through 10.0.1. Users are recommended to upgrade to version 10.1.0, which fixes the issue.
Published: 2026-08-05T05:36:02.661Z
Updated: 2026-08-06T15:26:23.891Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-68078 vulnerable 2026-09-16 04:34:00.206960 Apache Qpid Broker-J: Unable to govern the maximum number of transfer frames per incoming delivery
It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial of service. This issue affects Apache Qpid Broker-J: through 10.0.1. Users are recommended to upgrade to version 10.1.0, which fixes the issue.
Published: 2026-08-05T05:43:35.812Z
Updated: 2026-08-05T15:29:55.243Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-68060 vulnerable 2026-09-16 04:34:00.154599 Apache Qpid Broker-J: Type size/count handling can lead to excessive allocation pre-authentication
A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects Apache Qpid Broker-J: through 10.0.1. Users are recommended to upgrade to version 10.1.0, which fixes the issue.
Published: 2026-08-05T05:26:27.176Z
Updated: 2026-08-06T15:37:59.327Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-68074 vulnerable 2026-09-16 04:33:59.924789 Apache Qpid Broker-J: Unbounded symbol value caching can lead to pre-authentication resource exhaustion
A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service. This issue affects Apache Qpid Broker-J: through 10.0.1. Users are recommended to upgrade to version 10.1.0, which fixes the issue.
Published: 2026-08-05T05:19:55.467Z
Updated: 2026-08-06T13:18:48.748Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-68073 vulnerable 2026-09-16 04:33:59.608878 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-68077 vulnerable 2026-09-16 04:33:59.508395 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0200 vulnerable 2026-06-08 05:12:19.255077 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-8030 vulnerable 2026-06-08 05:12:05.027011 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1298 vulnerable 2026-06-08 05:11:17.562237 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-15702 vulnerable 2026-06-08 05:08:59.410727 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-15701 vulnerable 2026-06-08 05:08:59.409593 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8741 vulnerable 2026-06-08 05:08:14.760825 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.