org.apache.qpid:protonj2 1.0.0-M13

Direct Vulnerabilities

Known vulnerabilities in the org.apache.qpid:protonj2 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
H Allocation of Resources Without Limits or Throttling Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via unbounded caching in the `symbol` process. An attacker can exhaust system resources by sending specially crafted requests prior to authentication. How to fix Allocation of Resources Without Limits or Throttling? Upgrade `org.apache.qpid:protonj2` to version 1.2.0 or higher.	[,1.2.0)
H Allocation of Resources Without Limits or Throttling Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the `session flow control` process. An attacker can exhaust available resources by sending data that causes the incoming window to be exceeded, resulting in service disruption. How to fix Allocation of Resources Without Limits or Throttling? Upgrade `org.apache.qpid:protonj2` to version 1.2.0 or higher.	[,1.2.0)
H Memory Allocation with Excessive Size Value Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value via improper handling of type size and count during the pre-authentication process. An attacker can trigger excessive memory allocation by sending specially crafted input, potentially leading to resource exhaustion and service disruption. How to fix Memory Allocation with Excessive Size Value? Upgrade `org.apache.qpid:protonj2` to version 1.2.0 or higher.	[,1.2.0)
H Allocation of Resources Without Limits or Throttling Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to insufficient enforcement of limits on the number of transfer frames per incoming delivery. An attacker can exhaust system resources and disrupt service availability by sending a large number of transfer frames within a single delivery. How to fix Allocation of Resources Without Limits or Throttling? Upgrade `org.apache.qpid:protonj2` to version 1.2.0 or higher.	[,1.2.0)
H Uncontrolled Recursion Affected versions of this package are vulnerable to Uncontrolled Recursion through unbounded nesting of types in the `process`. An attacker can cause a stack overflow and disrupt service availability by sending specially crafted input prior to authentication. How to fix Uncontrolled Recursion? Upgrade `org.apache.qpid:protonj2` to version 1.2.0 or higher.	[,1.2.0)

Vulnerability

Vulnerable Version

Allocation of Resources Without Limits or Throttling

Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via unbounded caching in the symbol process. An attacker can exhaust system resources by sending specially crafted requests prior to authentication.

How to fix Allocation of Resources Without Limits or Throttling?