CVE-2012-4458: Medium severity apache qpid vulnerability
It was discovered that the AMQP type decoder was exposed pre-authentication because it was possible to send arbitrary types in the client-properties map in a connection.start-ok message. This is used to send an array with elements which are all of width zero and thus consume no space on the wire, but need storage after decoding by the server. On some systems, a suitably chosen SIZE value triggers the OOM killer and terminates the server process permanently.
Acknowledgements:
This issue was discovered by Florian Weimer of the Red Hat Product Security Team.
Other sources
The AMQP type decoder in Apache Qpid 0.20 and earlier allows remote attackers to cause a denial of service (memory consumption and server crash) via a large number of zero width elements in the client-properties map in a connection.start-ok message.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2012-4458?
CVE-2012-4458 is classified as a medium severity vulnerability due to its potential impact on security by allowing arbitrary type manipulation.
How do I fix CVE-2012-4458?
To fix CVE-2012-4458, upgrade to Apache Qpid version 0.21 or later.
Which versions of Apache Qpid are affected by CVE-2012-4458?
CVE-2012-4458 affects Apache Qpid versions up to and including 0.20 as well as specific versions from 0.5 to 0.19.
What type of attack can CVE-2012-4458 facilitate?
CVE-2012-4458 can facilitate unauthorized data manipulation attacks by exploiting the AMQP type decoder before authentication.
Is there a specific vendor or distribution that provides a remedy for CVE-2012-4458?
Yes, Red Hat provides a remedial package version qpid-cpp 0.21 for addressing CVE-2012-4458.