VDB
CVE-2009-5005
CVE-2009-5005
PUBLISHED
CVSS 5 MEDIUM
The Cluster::deliveredEvent function in cluster/Cluster.cpp in Apache Qpid, as used in Red Hat Enterprise MRG before 1.3 and other products, allows remote attackers to cause a denial of service (daemon crash and cluster outage) via invalid AMQP data.
EPSS 5.93% · 93.1th percentile
Risk Scores
CVSS 2.0
5
EPSS Score
5.93%
93.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| apache | qpid | 0 |
| redhat | enterprise_mrg | 1.1.1, 1.1.2, 1.2 |
Timeline
- Oct 18, 2010 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 13, 2022 EPSS Score
- Jul 17, 2022 EPSS Score
- Jul 18, 2022 EPSS Score
- Oct 27, 2022 EPSS Score
- Dec 19, 2022 EPSS Score
- Feb 3, 2023 EPSS Score
- Feb 10, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 4, 2023 EPSS Score
References
- ADV-2010-2684 vdb
- 41710 third-party-advisory
- RHSA-2010:0773 vendor-advisory
- RHSA-2010:0774 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=642373 url
- http://svn.apache.org/viewvc?revision=785788&view=revision url
- 41812 third-party-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2009-5005 advisory