MEDIUM🇵🇱 Wersja polska

CVE-2026-68080

CVSS 6.5v3.1pub. 2026-08-05upd. 2026-08-06

It was not possible to govern the rate at which the broker would respond to an echo flow, enabling an authenticated attacker to cause excessive resource usage and potential denial of service. This issue affects Apache Qpid Broker-J: through 10.0.1. Users are recommended to upgrade to version 10.1.0, which fixes the issue.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

  • Apache Qpid Broker J

    APP
    Apache
    < 10.1.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
DoS
CWE
References

Related vulnerabilities

CVE-2017-15702CRITICAL9.8PL ✓same product

Apache Qpid Broker-J — pominięcie uwierzytelniania przez podmianę dostawcy auth

CVE-2016-4432CRITICAL9.1PL ✓same product

Pominięcie uwierzytelnienia w Apache Qpid Java (AMQP)

CVE-2026-68060HIGH7.5PL ✓same product

Apache Qpid Broker-J – DoS przez nadmierne alokacje pamięci (pre-auth)

CVE-2026-68073HIGH7.5PL ✓same product

Apache Qpid Broker-J — DoS przez przepełnienie stosu bez uwierzytelnienia

CVE-2026-68074HIGH7.5PL ✓same product

Apache Qpid Broker-J: wyczerpanie zasobów bez uwierzytelnienia (DoS)