CVE-2019-0200: High severity apache qpid broker-j vulnerability
A Denial of Service vulnerability was found in Apache Qpid Broker-J versions 6.0.0-7.0.6 (inclusive) and 7.1.0 which allows an unauthenticated attacker to crash the broker instance by sending specially crafted commands using AMQP protocol versions below 1.0 (AMQP 0-8, 0-9, 0-91 and 0-10). Users of Apache Qpid Broker-J versions 6.0.0-7.0.6 (inclusive) and 7.1.0 utilizing AMQP protocols 0-8, 0-9, 0-91, 0-10 must upgrade to Qpid Broker-J versions 7.0.7 or 7.1.1 or later.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-0200?
CVE-2019-0200 is classified as a Denial of Service vulnerability, which can significantly impact the availability of the affected systems.
How do I fix CVE-2019-0200?
To mitigate CVE-2019-0200, upgrade to Apache Qpid Broker-J version 7.1.1 or later that addresses the vulnerability.
Which versions of Apache Qpid Broker-J are affected by CVE-2019-0200?
CVE-2019-0200 affects Apache Qpid Broker-J versions 6.0.0 up to 7.0.6 (inclusive) and version 7.1.0.
Can CVE-2019-0200 be exploited remotely?
Yes, an unauthenticated attacker can exploit CVE-2019-0200 remotely by sending specially crafted AMQP protocol commands.
What kind of impact can CVE-2019-0200 have on my systems?
Exploitation of CVE-2019-0200 can lead to crashes of the broker instance, resulting in service interruptions.