NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

#qpid-proton

4 stories this week · 4 this month · 4 in 6 months · mostly security

Stories per day · 30 days

Relatedapache4 amqp3 tls2 authentication-bypass1 buffer-overflow1 certificate-validation1 denial-of-service1 openssl1 sasl1

1 stories, newest first · one card per story

oss-security2d agohigh

Qpid Proton C through 0.40.0 can treat AMQP frames as SASL

Apache calls the flaw important: peers can send regular AMQP frames that Proton dispatches as SASL, with no username set.

4 sources apache qpid-proton

1