A message body that is deeply nested and decoded by pn_message_body() could overflow the stack and cause a crash.
A message body that is deeply nested and decoded by pn_message_body() could overflow the stack and cause a crash. This issue affects Apache Qpid Proton C: through 0.40.0. Users are recommended to upgrade to version 0.41.1, which fixes the issue.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Apache Software Foundation
- Product
- Apache Qpid Proton C
- Fix
- available
- Weakness
- CWE-674
- NVD status
- Received
Why it ranks 11 (Routine)
- Fix available
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.