Description
A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service.

This issue affects Apache Qpid Broker-J: through 10.1.0.

Users are recommended to upgrade to version 10.1.1, which fixes the issue.
Published: 2026-09-25
Score: 7.5 High
EPSS: < 1% Very Low
KEV: No
Impact: Denial of Service
Action: Patch Now
AI Analysis

Impact

A pre‑authentication attacker can send crafted AMQP 0‑10 messages that exploit improper type size/count handling in the broker’s decoder, causing the broker to allocate excessive memory and potentially crash. The vulnerability results in a denial of service for all connections that access the broker.

Affected Systems

Apache Qpid Broker‑J versions up to and including 10.1.0 are affected. Users are advised to upgrade to 10.1.1, which contains the fix.

Risk and Exploitability

The CVSS score is 7.5, the EPSS score is < 1% and the vulnerability is not listed in the CISA KEV catalog. The flaw can be exploited without authentication by sending malformed AMQP packets, making it suitable for remote denial‑of‑service attacks. Because the issue is triggered prior to authentication, any network‑connected client can initiate an exploit. Until the broker is patched, the risk of availability loss remains high.

Generated by OpenCVE AI on September 26, 2026 at 00:25 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade Apache Qpid Broker‑J to version 10.1.1 or later.
  • Restrict AMQP traffic to trusted IP addresses or apply network‑based filtering until the upgrade is performed.
  • Configure the broker or surrounding network devices to detect oversized AMQP packets, terminate malicious connections, and apply rate‑limiting to mitigate DoS attempts.

Generated by OpenCVE AI on September 26, 2026 at 00:25 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 05 Oct 2026 18:15:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:a:apache:qpid_broker-j:*:*:*:*:*:*:*:*

Sat, 26 Sep 2026 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 threat_severity

Important

Fri, 25 Sep 2026 14:30:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Fri, 25 Sep 2026 11:00:00 +0000

Type Values Removed Values Added
First Time appeared Apache
Apache qpid Broker-j
Vendors & Products Apache
Apache qpid Broker-j

Fri, 25 Sep 2026 10:30:00 +0000

Type Values Removed Values Added
References

Fri, 25 Sep 2026 08:30:00 +0000

Type Values Removed Values Added
Description A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects Apache Qpid Broker-J: through 10.1.0. Users are recommended to upgrade to version 10.1.1, which fixes the issue.
Title Apache Qpid Broker-J: Type size/count handling can lead to excessive allocation pre-authentication in the AMQP 0-10 decoder
Weaknesses CWE-770
References

Subscriptions

Apache Qpid Broker-j
cve-icon MITRE

Status: PUBLISHED

Assigner: apache

Published:

Updated: 2026-09-25T13:11:31.985Z

Reserved: 2026-09-16T13:25:51.418Z

Link: CVE-2026-92560

cve-icon Vulnrichment

Updated: 2026-09-25T09:12:50.497Z

cve-icon NVD

Status : Analyzed

Published: 2026-09-25T09:17:06.587

Modified: 2026-10-05T18:06:34.563

Link: CVE-2026-92560

cve-icon Redhat

Severity : Important

Publid Date: 2026-09-25T08:17:01Z

Links: CVE-2026-92560 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-09-26T00:30:19Z

Weaknesses
  • CWE-770

    Allocation of Resources Without Limits or Throttling