CVE-2010-3083
12.10.2010, 21:00
sys/ssl/SslSocket.cpp in qpidd in Apache Qpid, as used in Red Hat Enterprise MRG before 1.2.2 and other products, when SSL is enabled, allows remote attackers to cause a denial of service (daemon outage) by connecting to the SSL port but not participating in an SSL handshake.Enginsight
| Vendor | Product | Version |
|---|---|---|
| apache | qpid | 0.5 |
| apache | qpid | 0.6 |
| redhat | enterprise_mrg | 𝑥 ≤ 1.2 |
| redhat | enterprise_mrg | 1.0 |
| redhat | enterprise_mrg | 1.0.1 |
| redhat | enterprise_mrg | 1.0.2 |
| redhat | enterprise_mrg | 1.0.3 |
| redhat | enterprise_mrg | 1.1.1 |
| redhat | enterprise_mrg | 1.1.2 |
𝑥
= Vulnerable software versions
References