Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
4
CVSSv2

CVE-2009-5006

Published: 18/10/2010 Updated: 15/07/2021
CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8
VMScore: 356
Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P
Subscribe to Qpid

Vulnerability Summary

The SessionAdapter::ExchangeHandlerImpl::checkAlternate function in broker/SessionAdapter.cpp in the C++ Broker component in Apache Qpid prior to 0.6, as used in Red Hat Enterprise MRG prior to 1.3 and other products, allows remote authenticated users to cause a denial of service (NULL pointer dereference, daemon crash, and cluster outage) by attempting to modify the alternate of an exchange.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

apache qpid

redhat enterprise_mrg 1.2

redhat enterprise_mrg 1.0.2

redhat enterprise_mrg 1.1.2

redhat enterprise_mrg 1.0.3

redhat enterprise_mrg 1.0

redhat enterprise_mrg

redhat enterprise_mrg 1.0.1

redhat enterprise_mrg 1.1.1

Vendor Advisories

Red Hat: Moderate: Red Hat Enterprise MRG Messaging and Grid Version 1.3
Synopsis Moderate: Red Hat Enterprise MRG Messaging and Grid Version 13 Type/Severity Security Advisory: Moderate Topic Updated packages that fix two security issues, several bugs, and addmultiple enhancements are now available as part of the ongoing support andmaintenance of Red Hat Enterprise MRG Messagi ...

References

NVD-CWE-Otherhttp://svn.apache.org/viewvc?revision=811188&view=revisionhttp://www.vupen.com/english/advisories/2010/2684http://secunia.com/advisories/41710http://secunia.com/advisories/41812https://rhn.redhat.com/errata/RHSA-2010-0773.htmlhttps://rhn.redhat.com/errata/RHSA-2010-0774.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=642377https://issues.apache.org/jira/browse/QPID-2080https://access.redhat.com/errata/RHSA-2010:0773https://nvd.nist.gov
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook