PUBLISHED
2026-08-05 07:16
MODIFIED
2026-08-05 07:16
EPSS (Prob. Exploit)
0.65%
Top 49.3%
> DESCRIPTION
It was not possible to govern the rate at which the broker would respond to an echo flow, enabling an authenticated attacker to cause excessive resource usage and potential denial of service.
This issue affects Apache Qpid Broker-J: through 10.0.1.
Users are recommended to upgrade to version 10.1.0, which fixes the issue.
> AFFECTED_PRODUCTS
ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.
> CWE DETAILED DESCRIPTIONS
CWE-406: Insufficient Control of Network Message Volume (Network Amplification) - The product does not sufficiently monitor or control transmitted network traffic volume, so that an actor can cause the product to transmit more traffic than should be allowed for that actor.
> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)
Apache Qpid Broker-J: Unbounded echo flow responses can lead to denial of service
AFFECTED PACKAGES:
Unknown / Unknown
7 versions affected
> HISTORIQUE DES MODIFICATIONS
Première apparition
05/08/2026 07:16
Source: NVD
📊
ENRICHISSEMENT
01/09/2026 06:02
CWE
Champ modifié: Description CWE
Nouvelle valeur:
CWE-406: Insufficient Control of Network Message Volume (Network Amplification) - The product does not sufficiently monitor or control transmitted network traffic volume, so that an actor can cause th...
Total des modifications: 1
Dernière mise à jour: 2 months ago