CVE-2012-4460

The serializing/deserializing functions in the qpid::framing::Buffer class in Apache Qpid 0.20 and earlier allow remote attackers to cause a denial of service (assertion failure and daemon exit) via unspecified vectors. NOTE: this issue could also trigger an out-of-bounds read, but it might not trigger a crash.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:apache:qpid:*:*:*:*:*:*:*:*
cpe:2.3:a:apache:qpid:0.5:*:*:*:*:*:*:*
cpe:2.3:a:apache:qpid:0.6:*:*:*:*:*:*:*
cpe:2.3:a:apache:qpid:0.7:*:*:*:*:*:*:*
cpe:2.3:a:apache:qpid:0.8:*:*:*:*:*:*:*
cpe:2.3:a:apache:qpid:0.9:*:*:*:*:*:*:*
cpe:2.3:a:apache:qpid:0.10:*:*:*:*:*:*:*
cpe:2.3:a:apache:qpid:0.11:*:*:*:*:*:*:*
cpe:2.3:a:apache:qpid:0.12:*:*:*:*:*:*:*
cpe:2.3:a:apache:qpid:0.13:*:*:*:*:*:*:*
cpe:2.3:a:apache:qpid:0.14:*:*:*:*:*:*:*
cpe:2.3:a:apache:qpid:0.15:*:*:*:*:*:*:*
cpe:2.3:a:apache:qpid:0.16:*:*:*:*:*:*:*
cpe:2.3:a:apache:qpid:0.17:*:*:*:*:*:*:*
cpe:2.3:a:apache:qpid:0.18:*:*:*:*:*:*:*
cpe:2.3:a:apache:qpid:0.19:*:*:*:*:*:*:*

History

07 Nov 2023, 02:11

Type Values Removed Values Added
Summary The serializing/deserializing functions in the qpid::framing::Buffer class in Apache Qpid 0.20 and earlier allow remote attackers to cause a denial of service (assertion failure and daemon exit) via unspecified vectors. NOTE: this issue could also trigger an out-of-bounds read, but it might not trigger a crash. The serializing/deserializing functions in the qpid::framing::Buffer class in Apache Qpid 0.20 and earlier allow remote attackers to cause a denial of service (assertion failure and daemon exit) via unspecified vectors. NOTE: this issue could also trigger an out-of-bounds read, but it might not trigger a crash.

Information

Published : 2013-03-14 03:10

Updated : 2024-02-28 12:00


NVD link : CVE-2012-4460

Mitre link : CVE-2012-4460

CVE.ORG link : CVE-2012-4460


JSON object : View

Products Affected

apache

  • qpid
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer