Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Ganesh Murthy

#40357of 53,633
6.8Total CVSS
Vulnerabilities · 1
PT-2018-5977
6.8
2018-02-13
Apache · Apache Qpid Dispatch Router · CVE-2017-15699
Name of the Vulnerable Software and Affected Versions: Apache Qpid Dispatch Router versions 0.7.0 through 0.8.0 Description: A Denial of Service issue was found in the software. To exploit this, a remote user must establish an AMQP connection to the Qpid Dispatch Router and send a specifically crafted AMQP frame, causing it to shut down. Recommendations: For versions 0.7.0 through 0.8.0, consider restricting access to the AMQP connection to minimize the risk of exploitation until a patch is available. As a temporary workaround, monitor the system for unusual AMQP frame activity and be prepared to restart the Qpid Dispatch Router in case of a shutdown. At the moment, there is no information about a newer version that contains a fix for this issue.