Apache · Apache Qpid Dispatch Router · CVE-2017-15699
Name of the Vulnerable Software and Affected Versions:
Apache Qpid Dispatch Router versions 0.7.0 through 0.8.0
Description:
A Denial of Service issue was found in the software. To exploit this, a remote user must establish an AMQP connection to the Qpid Dispatch Router and send a specifically crafted AMQP frame, causing it to shut down.
Recommendations:
For versions 0.7.0 through 0.8.0, consider restricting access to the AMQP connection to minimize the risk of exploitation until a patch is available. As a temporary workaround, monitor the system for unusual AMQP frame activity and be prepared to restart the Qpid Dispatch Router in case of a shutdown. At the moment, there is no information about a newer version that contains a fix for this issue.