CVE-2012-2145

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-09-28 · updated 2026-06-16
Weakness: CWE-399

Description

Apache Qpid 0.17 and earlier does not properly restrict incoming client connections, which allows remote attackers to cause a denial of service (file descriptor consumption) via a large number of incomplete connections.

Affected products

Apache Qpid: through 0.17; 0.6, 0.7, 0.8, 0.9, 0.10, 0.12 (+2)

References

http://rhn.redhat.com/errata/RHSA-2012-1269.html
http://rhn.redhat.com/errata/RHSA-2012-1277.html
http://secunia.com/advisories/50573
http://secunia.com/advisories/50698
http://secunia.com/advisories/50699
http://www.securityfocus.com/bid/55608
https://bugzilla.redhat.com/show_bug.cgi?id=817175
https://exchange.xforce.ibmcloud.com/vulnerabilities/78730
https://issues.apache.org/jira/browse/QPID-2616
https://issues.apache.org/jira/browse/QPID-4021
http://rhn.redhat.com/errata/RHSA-2012-1269.html
http://rhn.redhat.com/errata/RHSA-2012-1277.html

Get alerted when CVE-2012-2145 or the next vulnerability affects your stack