HIGH🇵🇱 Wersja polska

CVE-2026-68073

CVSS 7.5pub. 2026-08-05upd. 2026-08-06

A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qpid Broker-J: through 10.0.1. Users are recommended to upgrade to version 10.1.0, which fixes the issue.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

  • Apache Qpid Broker J

    APP
    Apache
    < 10.1.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
DoS
CWE
References

Related vulnerabilities

CVE-2017-15702CRITICAL9.8PL ✓same product

Apache Qpid Broker-J — pominięcie uwierzytelniania przez podmianę dostawcy auth

CVE-2016-4432CRITICAL9.1PL ✓same product

Pominięcie uwierzytelnienia w Apache Qpid Java (AMQP)

CVE-2026-68060HIGH7.5PL ✓same product

Apache Qpid Broker-J – DoS przez nadmierne alokacje pamięci (pre-auth)

CVE-2026-68074HIGH7.5PL ✓same product

Apache Qpid Broker-J: wyczerpanie zasobów bez uwierzytelnienia (DoS)

CVE-2019-0200HIGH7.5same product

A Denial of Service vulnerability was found in Apache Qpid Broker-J versions 6.0.0-7.0.6 (inclusive) and 7.1.0...