PUBLISHED
2026-09-25 09:17
MODIFIED
2026-09-25 09:17
EPSS (Prob. Exploit)
0.41%
Top 65.8%
> DESCRIPTION
Improper handling of compressed data in the shared GZIP decompressor used for AMQP 0-8/0-9/0-9-1 and AMQP 0-10 message delivery, message conversion and HTTP management JSON rendering allows authenticated message producers to exhaust memory and disrupt broker availability via processing without a decompressed-output limit.
This issue affects Apache Qpid Broker-J: through 10.1.0.
Users are recommended to upgrade to version 10.1.1, which fixes the issue.
> AFFECTED_PRODUCTS
ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.
> CWE DETAILED DESCRIPTIONS
CWE-409: Improper Handling of Highly Compressed Data (Data Amplification) - The product does not handle or incorrectly handles a compressed input with a very high compression ratio that produces a large output.
> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)
Apache Qpid Broker-J: Uncontrolled resource consumption during AMQP delivery decompression, message conversion and HTTP management JSON rendering
AFFECTED PACKAGES:
Unknown / Unknown
8 versions affected
> HISTORIQUE DES MODIFICATIONS
Première apparition
25/09/2026 09:17
Source: NVD
📊
ENRICHISSEMENT
01/10/2026 06:01
CWE
Champ modifié: Description CWE
Nouvelle valeur:
CWE-409: Improper Handling of Highly Compressed Data (Data Amplification) - The product does not handle or incorrectly handles a compressed input with a very high compression ratio that produces a lar...
Total des modifications: 1
Dernière mise à jour: 3 weeks ago