CVE-2016-4974
1 advisory.
Maven/org.apache.qpid:qpid-jms-client CVE-2016-4974: high 7.5
Improper Input Validation in Apache Qpid AMQP 0-x JMS
Action: Upgrade org.apache.qpid:qpid-jms-client to 0.10.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.10.0 | - |
Fixed versions
| 0.10.0 |
Sources
- osv: GHSA-f38p-mq64-h784
- https://nvd.nist.gov/vuln/detail/CVE-2016-4974
- https://issues.apache.org/jira/browse/QPIDJMS-188
- http://packetstormsecurity.com/files/137749/Apache-Qpid-Untrusted-Input-Deserialization.html
- http://qpid.apache.org/components/jms/security-0-x.html
- http://qpid.apache.org/components/jms/security.html
CVE-2016-4974 · published · modified · JSON