Access Restriction Bypass The advisory has been revoked - it doesn't affect any version of package qpid-cpp  (opens in a new tab)


Threat Intelligence

EPSS
6.62% (93rd percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-UBUNTU1404-QPIDCPP-356099
  • published2 Feb 2015
  • disclosed2 Feb 2015

Introduced: 2 Feb 2015

CVE-2015-0223  (opens in a new tab)
CWE-264  (opens in a new tab)

Amendment

The Ubuntu security team deemed this advisory irrelevant for Ubuntu:14.04.

NVD Description

Note: Versions mentioned in the description apply only to the upstream qpid-cpp package and not the qpid-cpp package as distributed by Ubuntu.

Unspecified vulnerability in Apache Qpid 0.30 and earlier allows remote attackers to bypass access restrictions on qpidd via unknown vectors, related to 0-10 connection handling.