CVE-2012-4459: Integer Overflow
Integer overflow in the qpid::framing::Buffer::checkAvailable function in Apache Qpid 0.20 and earlier allows remote attackers to cause a denial of service (crash) via a crafted message, which triggers an out-of-bounds read.
Other sources
It was discovered that the qpid::framing::Buffer::checkAvailable() function could crash due to a wraparound. The function looks like this:
void checkAvailable(uint32t count) { if (position + count > size) throw OutOfBounds(); }
where position + count can overflow, resulting in a value which is smaller than size. The putString() functions contain potential wraparounds in the argument to checkAvailable().
Acknowledgements:
This issue was discovered by Florian Weimer of the Red Hat Product Security Team.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2012-4459?
CVE-2012-4459 is classified as a high severity vulnerability due to its potential for denial of service attacks.
How do I fix CVE-2012-4459?
To fix CVE-2012-4459, upgrade Apache Qpid to version 0.21 or later.
What versions of Apache Qpid are affected by CVE-2012-4459?
CVE-2012-4459 affects Apache Qpid versions 0.20 and earlier, as well as versions 0.5 through 0.19.
What type of attack is possible with CVE-2012-4459?
CVE-2012-4459 allows attackers to perform a denial of service by crashing the application through a crafted message.
Is there a known exploit for CVE-2012-4459?
There are no public exploits specifically for CVE-2012-4459, but the vulnerability can be exploited by sending specially crafted messages to the affected service.