AIKIDO-2026-423876
qpid-broker-plugins-amqp-0-8-protocol is vulnerable to Denial of Service (DoS)
75
High Risk
This Affects:
qpid-broker-plugins-amqp-0-8-protocolTL;DR
AMQP 0-8, 0-9, and 0-9-1 field-table decoding recurses through nested types with no depth limit. A client can send a deeply nested field table before authentication and overflow the stack, stopping the broker. The fix caps type-nesting depth while field tables are decoded.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and the broker accepts AMQP 0-8, 0-9, or 0-9-1 connections.
Background info
qpid-broker-plugins-amqp-0-8-protocol is vulnerable to Denial of Service (DoS) in versions 0.24 - 10.1.0.
How to fix this
Upgrade the org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol library to the patch version.
Links
security.apache.org/projects/qpid/CVE-2026-92564.cve.jsonlists.apache.org/thread/hw4jkngtkzf0dxdj9mv3z2p71mkpjvx4openwall.com/lists/oss-security/2026/09/24/14
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.