VDB
CVE-2009-5006
CVE-2009-5006
PUBLISHED
CVSS 4 MEDIUM
The SessionAdapter::ExchangeHandlerImpl::checkAlternate function in broker/SessionAdapter.cpp in the C++ Broker component in Apache Qpid before 0.6, as used in Red Hat Enterprise MRG before 1.3 and other products, allows remote authenticated users to cause a denial of service (NULL pointer dereference, daemon crash, and cluster outage) by attempting to modify the alternate of an exchange.
EPSS 4.09% · 89.7th percentile
Risk Scores
CVSS 2.0
4
EPSS Score
4.09%
89.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| apache | qpid | 0 |
| n/a | n/a | n/a |
| redhat | enterprise_mrg | 1.0.1, 1.0.2, 1.0.3 |
Timeline
- Oct 18, 2010 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 20, 2022 EPSS Score
- Jul 17, 2022 EPSS Score
- Jul 18, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 26, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Feb 3, 2023 EPSS Score
- Feb 13, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
References
- RHSA-2010:0774 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=642377 url
- 41710 third-party-advisory
- RHSA-2010:0773 vendor-advisory
- http://svn.apache.org/viewvc?revision=811188&view=revision url
- ADV-2010-2684 vdb
- https://issues.apache.org/jira/browse/QPID-2080 url
- 41812 third-party-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2009-5006 advisory