Catálogo de CVE
CVE-2026-67589
A pre-authentication attacker could leverage type…
A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects Apache Qpid ProtonJ2: through 1.1.0. Users are recommended to upgrade to version 1.2.0, which fixes the issue.
- Gravidade
- High · CVSS 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.77% · Oct 27, 2026
Projects and upstream resources
Reported versions and fixes
Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.
| Distribution / release | Package | Version | Status | Source |
|---|---|---|---|---|
| Debianbookworm | qpid-proton | Not reported | UnknownSource applicability is not established | Provider not reported |
Provider details and historical evidence
| Distribution / release | Package | Version | Status | Source |
|---|---|---|---|---|
| Debianbookworm | qpid-proton | Not reported | UnknownSource applicability is not established | Provider not reported |
Original provider fields
{
"package_releases": [],
"fixed_versions": [],
"distribution_packages": [
{
"name": "qpid-proton",
"distro": "debian",
"ranges": [
{
"fixed": "",
"introduced": "0"
}
],
"release": "bookworm",
"ecosystem": "deb",
"fixed_version": "not yet fixed",
"applicability_unknown": true
},
{
"name": "qpid_protonj2",
"ranges": [
{
"fixed": "1.2.0",
"introduced": "",
"last_affected": "",
"start_excluding": ""
}
],
"ecosystem": "cpe",
"provider_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-67589",
"fixed_version": "1.2.0",
"provider_source": "nvd",
"provider_record_id": "NVD-CVE-2026-67589",
"provider_updated_at": "2026-10-24T16:10:00.153"
}
]
}OpenFactory catalog packages
A associação de pacotes está em andamento.
[Debian 12 (Bookworm)]
- [libqpid-proton11]Desconhecido
Pacote fonte: [qpid-proton]
Detalhes (2)
0.37.0-2+b1· amd64 · bookwormAfetada
nvd · qpid-proton · debian · bookworm
0.37.0-2+b1· arm64 · bookwormAfetada
nvd · qpid-proton · debian · bookworm
- [libqpid-proton11-dev]Desconhecido
Pacote fonte: [qpid-proton]
Detalhes (2)
0.37.0-2+b1· amd64 · bookwormAfetada
nvd · qpid-proton · debian · bookworm
0.37.0-2+b1· arm64 · bookwormAfetada
nvd · qpid-proton · debian · bookworm
- [libqpid-proton11-dev-doc]Desconhecido
Pacote fonte: [qpid-proton]
Detalhes (2)
0.37.0-2· all · bookwormAfetada
nvd · qpid-proton · debian · bookworm
0.37.0-2· all · bookwormAfetada
nvd · qpid-proton · debian · bookworm
- [libqpid-proton11-dev-examples]Desconhecido
Pacote fonte: [qpid-proton]
Detalhes (2)
0.37.0-2· all · bookwormAfetada
nvd · qpid-proton · debian · bookworm
0.37.0-2· all · bookwormAfetada
nvd · qpid-proton · debian · bookworm
- [libqpid-proton-cpp12]Desconhecido
Pacote fonte: [qpid-proton]
Detalhes (2)
0.37.0-2+b1· amd64 · bookwormAfetada
nvd · qpid-proton · debian · bookworm
0.37.0-2+b1· arm64 · bookwormAfetada
nvd · qpid-proton · debian · bookworm
- [libqpid-proton-cpp12-dev]Desconhecido
Pacote fonte: [qpid-proton]
Detalhes (2)
0.37.0-2+b1· amd64 · bookwormAfetada
nvd · qpid-proton · debian · bookworm
0.37.0-2+b1· arm64 · bookwormAfetada
nvd · qpid-proton · debian · bookworm
- [libqpid-proton-cpp12-dev-doc]Desconhecido
Pacote fonte: [qpid-proton]
Detalhes (2)
0.37.0-2· all · bookwormAfetada
nvd · qpid-proton · debian · bookworm
0.37.0-2· all · bookwormAfetada
nvd · qpid-proton · debian · bookworm
- [python3-qpid-proton]Desconhecido
Pacote fonte: [qpid-proton]
Detalhes (2)
0.37.0-2+b1· amd64 · bookwormAfetada
nvd · qpid-proton · debian · bookworm
0.37.0-2+b1· arm64 · bookwormAfetada
nvd · qpid-proton · debian · bookworm
- [python-qpid-proton-doc]Desconhecido
Pacote fonte: [qpid-proton]
Detalhes (2)
0.37.0-2· all · bookwormAfetada
nvd · qpid-proton · debian · bookworm
0.37.0-2· all · bookwormAfetada
nvd · qpid-proton · debian · bookworm
Observado:
Referências
- [http://www.openwall.com/lists/oss-security/2026/08/04/28]
- [https://access.redhat.com/errata/RHSA-2026:69459]
- [https://lists.apache.org/thread/bs24x4778dh72xtfs299cy8krvdlo47q]
- [https://nvd.nist.gov/vuln/detail/CVE-2026-67589]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2026-67589]
- [https://security-tracker.debian.org/tracker/CVE-2026-67589]
[Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]