> CVE-2026-66257

« BACK_TO_HOME
PUBLISHED
2026-08-05 06:16
MODIFIED
2026-08-05 06:16
EPSS (Prob. Exploit)
0.77%
Top 44.2%
DATA SOURCES:
NVD 🔗 2026-08-05 CWE MITRE 🔗 2026-11-01 FIRST EPSS 🔗 2026-11-01 OSV 🔗 2026-11-02

> DESCRIPTION

A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service. This issue affects Apache Qpid Proton-J: through 0.34.1. Users are recommended to upgrade to version 0.35.0, which fixes the issue.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> WEAKNESSES

CWE-770

> CWE DETAILED DESCRIPTIONS

CWE-770: Allocation of Resources Without Limits or Throttling - The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

> RED HAT SECURITY ADVISORIES

Red Hat Security Advisory: Red Hat Build of Apache Camel 4.18 for Quarkus 3.33 update is now available (RHBQ 3.33.3.SP1)
An update for Red Hat Build of Apache Camel 4.18 for Quarkus 3.33 update is now available (RHBQ 3.33.3.SP1).The purpose of this text-only errata is to inform you about the enhancements that improve yo...
Red Hat Security Advisory: Red Hat AMQ Broker 7.13.6 release and security update
Red Hat AMQ Broker 7.13.6 is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring Sy...
Red Hat Security Advisory: Red Hat AMQ Broker 7.14.1 release and security update
Red Hat AMQ Broker 7.14.1 is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring Sy...
Red Hat Security Advisory: AMQ Clients 2026.Q3
An update is now available for Red Hat AMQ Clients Red Hat Product Security has rated this update as having an impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which give...
Red Hat Security Advisory: Red Hat Build of Apache Camel 4.18.4 for Spring Boot release.
Red Hat build of Apache Camel 4.18.4 for Spring Boot patch release and security update is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Com...

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

Apache Qpid Proton-J: Unbounded symbol value caching can lead to pre-authentication resource exhaustion

AFFECTED PACKAGES:
Unknown / Unknown
32 versions affected

> HISTORIQUE DES MODIFICATIONS

Première apparition
05/08/2026 06:16
Source: NVD
📊 ENRICHISSEMENT 01/09/2026 06:02
CWE
Champ modifié: Description CWE
Ancienne valeur:
N/A
Nouvelle valeur:
CWE-770: Allocation of Resources Without Limits or Throttling - The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the ...
Total des modifications: 1 Dernière mise à jour: 2 months ago

> REFERENCES

https://lists.apache.org/thread/dnczt6bgfcq2x6q8ljco177h1qmv59fm
« BACK_TO_HOME