Apache Software Foundation Qpid 0.6
Approved changes feed: RSS · Atom
cpe:2.3:a:apache:qpid:0.6:*:*:*:*:*:*:*
part: a version: 0.6 update: *
| Vendor | Apache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95) |
|---|---|
| Product | Qpid (381a5923-625d-59cb-81b9-6a1c7a0f2105) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:apache/qpid |
purl2cpe | 2026-06-01 10:14:24.360729 |
pkg:github/apache/qpid |
purl2cpe | 2026-06-01 10:14:24.360731 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2013-1909 |
vulnerable | 2026-06-08 05:03:57.219124 |
Details available
The Python client in Apache Qpid before 2.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
Published: 2013-08-23T16:00:00.000Z
Updated: 2024-09-16T17:42:38.074Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-4460 |
vulnerable | 2026-06-08 05:02:17.688109 |
Details available
The serializing/deserializing functions in the qpid::framing::Buffer class in Apache Qpid 0.20 and earlier allow remote attackers to cause a denial of service (assertion failure and daemon exit) via unspecified vectors. NOTE: this issue could also trigger an out-of-bounds read, but it might not trigger a crash.
Published: 2013-03-12T15:00:00.000Z
Updated: 2024-08-06T20:35:09.785Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-4459 |
vulnerable | 2026-06-08 05:02:17.687499 |
Details available
Integer overflow in the qpid::framing::Buffer::checkAvailable function in Apache Qpid 0.20 and earlier allows remote attackers to cause a denial of service (crash) via a crafted message, which triggers an out-of-bounds read.
Published: 2013-03-12T15:00:00.000Z
Updated: 2024-09-16T17:27:46.678Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-4458 |
vulnerable | 2026-06-08 05:02:17.686797 |
Details available
The AMQP type decoder in Apache Qpid 0.20 and earlier allows remote attackers to cause a denial of service (memory consumption and server crash) via a large number of zero width elements in the client-properties map in a connection.start-ok message.
Published: 2013-03-12T15:00:00.000Z
Updated: 2024-09-17T02:57:32.238Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-4446 |
vulnerable | 2026-06-08 05:02:17.640579 |
Details available
The default configuration for Apache Qpid 0.20 and earlier, when the federation_tag attribute is enabled, accepts AMQP connections without checking the source user ID, which allows remote attackers to bypass authentication and have other unspecified impact via an AMQP request.
Published: 2013-03-12T15:00:00.000Z
Updated: 2024-09-16T18:34:59.045Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-3467 |
vulnerable | 2026-06-08 05:02:10.077750 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2145 |
vulnerable | 2026-06-08 05:00:53.020566 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-3083 |
vulnerable | 2026-06-08 04:55:12.583606 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.