CVE-2015-0203

The qpidd broker in Apache Qpid 0.30 and earlier allows remote authenticated users to cause a denial of service (daemon crash) via an AMQP message with (1) an invalid range in a sequence set, (2) content-bearing methods other than message-transfer, or (3) a session-gap control before a corresponding session-attach.

• CWE-19

• http://www.securityfocus.com/bid/72030Third Party Advisory, VDB Entry
• https://access.redhat.com/errata/RHBA-2016:1500Third Party Advisory
• https://issues.apache.org/jira/browse/QPID-6310Issue Tracking, Vendor Advisory
• https://packetstormsecurity.com/files/129941/Apache-Qpid-0.30-Denial-Of-Service.htmlThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/72030Third Party Advisory, VDB Entry
• https://access.redhat.com/errata/RHBA-2016:1500Third Party Advisory
• https://issues.apache.org/jira/browse/QPID-6310Issue Tracking, Vendor Advisory
• https://packetstormsecurity.com/files/129941/Apache-Qpid-0.30-Denial-Of-Service.htmlThird Party Advisory, VDB Entry

Published

Feb 21, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-0197IBM General Parallel File System (GPFS) 3.4 before 3.4.0.32,…
• CVE-2015-0198IBM General Parallel File System (GPFS) 3.4 before 3.4.0.32,…
• CVE-2015-0199The mmfslinux kernel module in IBM General Parallel File Sys…
• CVE-2015-0200IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x before 7…
• CVE-2015-0201The Java SockJS client in Pivotal Spring Framework 4.1.x bef…
• CVE-2015-0202The mod_dav_svn server in Subversion 1.8.0 through 1.8.11 al…
• CVE-2015-0204The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL b…
• CVE-2015-0205The ssl3_get_cert_verify function in s3_srvr.c in OpenSSL 1.…
• CVE-2015-0206Memory leak in the dtls1_buffer_record function in d1_pkt.c …
• CVE-2015-0207The dtls1_listen function in d1_lib.c in OpenSSL 1.0.2 befor…
• CVE-2015-0208The ASN.1 signature-verification implementation in the rsa_i…
• CVE-2015-0209Use-after-free vulnerability in the d2i_ECPrivateKey functio…