Two vulnerabilities have been reported in Apache Qpid, which can be exploited by malicious users and malicious people to cause a DoS (Denial of Service).

1) An error when decoding AMQP types in certain messages can be exploited to exhaust memory resources and subsequently terminate the server process via a specially crafted client-properties map in a connection.start-ok message.

2) An integer overflow error in the "qpid::framing::Buffer::checkAvailable()" function (qpid/cpp/include/qpid/framing/Buffer.h) can be exploited to cause a buffer overflow.

Solution
Fixed in the SVN repository.
Further details available to Secunia VIM customers

Provided and/or discovered by
Florian Weimer, Red Hat Product Security Team.

Original Advisory
Apache Qpid:
https://issues.apache.org/jira/browse/QPID-4629

Red Hat:
https://bugzilla.redhat.com/show_bug.cgi?id=861234
https://bugzilla.redhat.com/show_bug.cgi?id=861241

Deep Links
Links available to Secunia VIM customers