CVE-2026-67553: Apache Qpid Proton Dotnet: Incoming session flow control window can be exceeded
An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service.
This issue affects Apache Qpid Proton-Dotnet: through 1.0.0.
Users are recommended to upgrade to version 1.1.0, which fixes the issue.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Apache Qpid Proton Dotnetto a version that resolves this vulnerability.Fixed in 1.1.0Patch CVE-2026-67553
Event History
Frequently Asked Questions
What is the severity of CVE-2026-67553?
CVE-2026-67553 has a risk level of 23, indicating a significant vulnerability.
How do I fix CVE-2026-67553?
To fix CVE-2026-67553, upgrade Apache Qpid Proton-Dotnet to version 1.1.0 or later.
What impact does CVE-2026-67553 have?
CVE-2026-67553 could lead to denial of service due to exceeding the session flow control incoming window.
Which versions of Apache Qpid Proton-Dotnet are affected by CVE-2026-67553?
CVE-2026-67553 affects all versions of Apache Qpid Proton-Dotnet up to and including 1.0.0.
Is exploitation of CVE-2026-67553 dependent on user authentication?
Yes, an authenticated attacker can exploit CVE-2026-67553 to exceed the session flow control window.