CVE-2018-1298

A Denial of Service vulnerability was found in Apache Qpid Broker-J 7.0.0 in functionality for authentication of connections for AMQP protocols 0-8, 0-9, 0-91 and 0-10 when PLAIN or XOAUTH2 SASL mechanism is used. The vulnerability allows unauthenticated attacker to crash the broker instance. AMQP 1.0 and HTTP connections are not affected. An authentication of incoming AMQP connections in Apache Qpid Broker-J is performed by special entities called "Authentication Providers". Each Authentication Provider can support several SASL mechanisms which are offered to the connecting clients as part of SASL negotiation process. The client chooses the most appropriate SASL mechanism for authentication. Authentication Providers of following types supports PLAIN SASL mechanism: Plain, PlainPasswordFile, SimpleLDAP, Base64MD5PasswordFile, MD5, SCRAM-SHA-256, SCRAM-SHA-1. XOAUTH2 SASL mechanism is supported by Authentication Providers of type OAuth2. If an AMQP port is configured with any of these Authentication Providers, the Broker may be vulnerable.

• CWE-20

• https://lists.apache.org/thread.html/d9087e9e57c9b6376754e2b4ea8cd5e9ae6449ed17fc384640c9c9e1%40%3Cusers.qpid.apache.org%3E
• https://lists.apache.org/thread.html/d9087e9e57c9b6376754e2b4ea8cd5e9ae6449ed17fc384640c9c9e1%40%3Cusers.qpid.apache.org%3E

Published

Feb 9, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-12972An issue was discovered in OpenTSDB 2.3.0. Many parameters t…
• CVE-2018-12973An issue was discovered in OpenTSDB 2.3.0. There is XSS in p…
• CVE-2018-12975The random() function of the smart contract implementation f…
• CVE-2018-12976In Go Doc Dot Org (gddo) through 2018-06-27, an attacker cou…
• CVE-2018-12977A SQL injection vulnerability in the SoftExpert (SE) Excelle…
• CVE-2018-12979An issue was discovered on WAGO e!DISPLAY 762-3000 through 7…6.5
• CVE-2018-12980An issue was discovered on WAGO e!DISPLAY 762-3000 through 7…8.8
• CVE-2018-12981An issue was discovered on WAGO e!DISPLAY 762-3000 through 7…5.4
• CVE-2018-12982Invalid memory read in the PoDoFo::PdfVariant::DelayedLoad()…
• CVE-2018-12983A stack-based buffer over-read in the PdfEncryptMD5Base::Com…
• CVE-2018-12984Hycus CMS 1.0.4 allows Authentication Bypass via "'=' 'OR'" …
• CVE-2018-12988GreenCMS 2.3.0603 has an arbitrary file download vulnerabili…