CVE-2026-105042 Apache Qpid Proton C: Unbounded recursion in parsing AMQP message bodies can lead to crash
CriticalCVSS 9.8
EPSS 0.46%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A message body that is deeply nested and decoded by pn_message_body() could overflow the stack and cause a crash.
This issue affects Apache Qpid Proton C: through 0.40.0.
Users are recommended to upgrade to version 0.41.1, which fixes the issue.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apache.org/qpid-proton | <= 0.40.0 | No fix listed |
| redhat/python39-qpid-proton(Red Hat:amq_clients:2023) | All versions | No fix listed |
| redhat/python3-qpid-proton(Red Hat:amq_clients:2023) | All versions | No fix listed |
| redhat/qpid-proton(Red Hat:amq_clients:2023) | All versions | No fix listed |
| redhat/openshift4/ose-kuryr-cni-rhel8(Red Hat:openshift:4) | All versions | No fix listed |
| redhat/openshift4/ose-kuryr-controller-rhel8(Red Hat:openshift:4) | All versions | No fix listed |
| redhat/qpid-proton(Red Hat:openstack:13) | All versions | No fix listed |
| redhat/rhosp13/openstack-ceilometer-notification(Red Hat:openstack:13) | All versions | No fix listed |
| redhat/rhosp13/openstack-qdrouterd(Red Hat:openstack:13) | All versions | No fix listed |
| redhat/qpid-proton(Red Hat:openstack:16.2) | All versions | No fix listed |
| redhat/rhosp-rhel8/openstack-ceilometer-notification(Red Hat:openstack:16.2) | All versions | No fix listed |
| redhat/rhosp-rhel8/openstack-qdrouterd(Red Hat:openstack:16.2) | All versions | No fix listed |
| redhat/qpid-proton(Red Hat:openstack:17.1) | All versions | No fix listed |
| redhat/rhosp-rhel9/openstack-ceilometer-notification(Red Hat:openstack:17.1) | All versions | No fix listed |
| redhat/rhosp-rhel9/openstack-qdrouterd(Red Hat:openstack:17.1) | All versions | No fix listed |
| redhat/qpid-proton(Red Hat:service_interconnect:2) | All versions | No fix listed |
| debian/qpid-proton(Debian:12) | All versions | No fix listed |
| debian/qpid-proton(Debian:12) | = 0.37.0-10 | No fix listed |
| debian/qpid-proton(Debian:12) | = 0.37.0-2 | No fix listed |
| debian/qpid-proton(Debian:12) | = 0.37.0-3 | No fix listed |
| debian/qpid-proton(Debian:12) | = 0.37.0-4 | No fix listed |
| debian/qpid-proton(Debian:12) | = 0.37.0-5 | No fix listed |
| debian/qpid-proton(Debian:12) | = 0.37.0-6 | No fix listed |
| debian/qpid-proton(Debian:12) | = 0.37.0-7 | No fix listed |
| debian/qpid-proton(Debian:12) | = 0.37.0-8 | No fix listed |
Show 17 more
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/qpid-proton(Debian:12) | = 0.37.0-9 | No fix listed |
| debian/qpid-proton(Debian:13) | All versions | No fix listed |
| debian/qpid-proton(Debian:13) | = 0.37.0-10 | No fix listed |
| debian/qpid-proton(Debian:13) | = 0.37.0-6 | No fix listed |
| debian/qpid-proton(Debian:13) | = 0.37.0-7 | No fix listed |
| debian/qpid-proton(Debian:13) | = 0.37.0-8 | No fix listed |
| debian/qpid-proton(Debian:13) | = 0.37.0-9 | No fix listed |
| debian/qpid-proton(Debian:14) | All versions | No fix listed |
| debian/qpid-proton(Debian:14) | = 0.37.0-10 | No fix listed |
| debian/qpid-proton(Debian:14) | = 0.37.0-6 | No fix listed |
| debian/qpid-proton(Debian:14) | = 0.37.0-7 | No fix listed |
| debian/qpid-proton(Debian:14) | = 0.37.0-8 | No fix listed |
| debian/qpid-proton(Debian:14) | = 0.37.0-9 | No fix listed |
| ubuntu/qpid-proton(Ubuntu:22.04) | All versions | No fix listed |
| ubuntu/qpid-proton(Ubuntu:24.04) | All versions | No fix listed |
| ubuntu/qpid-proton(Ubuntu:26.04) | All versions | No fix listed |
| ubuntu/qpid-proton(Ubuntu:26.10) | All versions | No fix listed |
References
- lists.apache.org vendor-advisory
- www.openwall.com
- Red Hat CVE page vendor-advisory
- Red Hat Bugzilla 2563306 issue-tracking
- www.cve.org
- nvd.nist.gov
- Debian Security Tracker CVE-2026-105042 vendor-advisory
- Ubuntu CVE tracker vendor-advisory
- bugs.debian.org issue-tracking