CVE-2009-5006: Null Pointer Dereference
It was reported [1], [2] that Apache QPID would crash due to a NULL pointer dereference when a remote, authenticated user attempted to redeclare an existing exchange and add a new alternate exchange. This would result in a denial of service condition of the server. This was corrected upstream by r811188 [3].
[1] https://issues.apache.org/jira/browse/QPID-2080 [2] https://bugzilla.redhat.com/showbug.cgi?id=517751 [3] http://svn.apache.org/viewvc?revision=811188&view=revision
Other sources
The SessionAdapter::ExchangeHandlerImpl::checkAlternate function in broker/SessionAdapter.cpp in the C++ Broker component in Apache Qpid before 0.6, as used in Red Hat Enterprise MRG before 1.3 and other products, allows remote authenticated users to cause a denial of service (NULL pointer dereference, daemon crash, and cluster outage) by attempting to modify the alternate of an exchange.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-5006?
CVE-2009-5006 has a severity rating that indicates it can lead to a denial of service condition in Apache Qpid.
How do I fix CVE-2009-5006?
To fix CVE-2009-5006, update your Apache Qpid installation to a version later than 0.5.
Which versions of software are affected by CVE-2009-5006?
CVE-2009-5006 affects Apache Qpid versions up to and including 0.5 and various versions of Red Hat Enterprise MRG.
What kind of attack does CVE-2009-5006 facilitate?
CVE-2009-5006 can be exploited by authenticated remote users to crash the server, resulting in a denial of service.
Is CVE-2009-5006 exploitable without authentication?
No, CVE-2009-5006 requires authentication from the user to exploit the vulnerability.