A flaw was found in Apache Qpid Broker-J. An unauthenticated remote attacker can cause a Denial of Service (DoS) by sending specially crafted messages containing deeply nested data structures during protocol handling. Because the broker does not properly restrict type nesting depth, processing these payloads triggers a stack overflow error, causing the service to crash.
Last checked: 2026-09-29 18:21 UTC
No exploitation evidence · CISA Coordinator (Assessed 2026-09-25 13:23 UTC)
Fix evidence last checked: 2026-10-02 16:54 UTC