Apache Software Foundation Qpid 0.14
Approved changes feed: RSS · Atom
cpe:2.3:a:apache:qpid:0.14:*:*:*:*:*:*:*
part: a version: 0.14 update: *
| Vendor | Apache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95) |
|---|---|
| Product | Qpid (381a5923-625d-59cb-81b9-6a1c7a0f2105) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:apache/qpid |
purl2cpe | 2026-06-01 10:14:24.360700 |
pkg:github/apache/qpid |
purl2cpe | 2026-06-01 10:14:24.360701 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2013-1909 |
vulnerable | 2026-06-08 05:03:57.223338 |
Details available
The Python client in Apache Qpid before 2.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
Published: 2013-08-23T16:00:00.000Z
Updated: 2024-09-16T17:42:38.074Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-4460 |
vulnerable | 2026-06-08 05:02:17.688240 |
Details available
The serializing/deserializing functions in the qpid::framing::Buffer class in Apache Qpid 0.20 and earlier allow remote attackers to cause a denial of service (assertion failure and daemon exit) via unspecified vectors. NOTE: this issue could also trigger an out-of-bounds read, but it might not trigger a crash.
Published: 2013-03-12T15:00:00.000Z
Updated: 2024-08-06T20:35:09.785Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-4459 |
vulnerable | 2026-06-08 05:02:17.687628 |
Details available
Integer overflow in the qpid::framing::Buffer::checkAvailable function in Apache Qpid 0.20 and earlier allows remote attackers to cause a denial of service (crash) via a crafted message, which triggers an out-of-bounds read.
Published: 2013-03-12T15:00:00.000Z
Updated: 2024-09-16T17:27:46.678Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-4458 |
vulnerable | 2026-06-08 05:02:17.686938 |
Details available
The AMQP type decoder in Apache Qpid 0.20 and earlier allows remote attackers to cause a denial of service (memory consumption and server crash) via a large number of zero width elements in the client-properties map in a connection.start-ok message.
Published: 2013-03-12T15:00:00.000Z
Updated: 2024-09-17T02:57:32.238Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-4446 |
vulnerable | 2026-06-08 05:02:17.645396 |
Details available
The default configuration for Apache Qpid 0.20 and earlier, when the federation_tag attribute is enabled, accepts AMQP connections without checking the source user ID, which allows remote attackers to bypass authentication and have other unspecified impact via an AMQP request.
Published: 2013-03-12T15:00:00.000Z
Updated: 2024-09-16T18:34:59.045Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-3467 |
vulnerable | 2026-06-08 05:02:10.078455 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2145 |
vulnerable | 2026-06-08 05:00:53.023761 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.