Denial of Service in Apache Qpid Broker-J Affecting Versions 6.0.0 to 7.0.6

CVE-2019-0200

What is CVE-2019-0200?

A Denial of Service vulnerability exists in Apache Qpid Broker-J from versions 6.0.0 to 7.0.6 and 7.1.0, allowing unauthenticated attackers to crash the broker instance. This is accomplished by sending specially crafted commands using AMQP protocol versions below 1.0 (specifically AMQP 0-8, 0-9, 0-91, and 0-10). Users operating these versions should upgrade to at least versions 7.0.7 or 7.1.1 to mitigate this issue and ensure the stability of their messaging services.

References