It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial of service
This issue affects Apache Qpid Proton-Dotnet: through 1.0.0.
Users are recommended to upgrade to version 1.1.0, which fixes the issue.
References
| Link | Resource |
|---|---|
| https://lists.apache.org/thread/dwrb02dp714lvlfxdj4o5bc9h3z54sw3 | Mailing List Vendor Advisory |
| http://www.openwall.com/lists/oss-security/2026/08/04/26 | Mailing List Third Party Advisory |
Configurations
History
07 Aug 2026, 13:07
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:apache:qpid_proton-dotnet:*:*:*:*:*:*:*:* | |
| First Time |
Apache
Apache qpid Proton-dotnet |
|
| References | () https://lists.apache.org/thread/dwrb02dp714lvlfxdj4o5bc9h3z54sw3 - Mailing List, Vendor Advisory | |
| References | () http://www.openwall.com/lists/oss-security/2026/08/04/26 - Mailing List, Third Party Advisory |
05 Aug 2026, 18:17
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
05 Aug 2026, 08:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
05 Aug 2026, 07:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-08-05 07:16
Updated : 2026-08-07 13:07
NVD link : CVE-2026-67555
Mitre link : CVE-2026-67555
CVE.ORG link : CVE-2026-67555
JSON object : View
Products Affected
apache
- qpid_proton-dotnet
CWE
CWE-770
Allocation of Resources Without Limits or Throttling