CVE catalog

CVE-2015-0203

UBUNTU-CVE-2015-0203

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
8.52% · Oct 25, 2026

The qpidd broker in Apache Qpid 0.30 and earlier allows remote authenticated users to cause a denial of service (daemon crash) via an AMQP message with (1) an invalid range in a sequence set, (2) content-bearing methods other than message-transfer, or (3) a session-gap control before a corresponding session-attach.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntuqpid-cpp16.040.16-9build1vulnerable
Ubuntuqpid-cpp16.040.16-9ubuntu1vulnerable
Ubuntuqpid-cpp16.040.16-9ubuntu2vulnerable

Fixed-version evidence

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References