CVE-2009-5005
CVE-2009-5005 is a medium-severity vulnerability in Redhat Enterprise Mrg with a CVSS 2.0 base score of 5.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: Medium (CVSS 2.0 base score 5.0)
- EPSS exploit prediction: 6% (92nd percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Redhat Enterprise Mrg
- Published:
- Last modified:
Description
The Cluster::deliveredEvent function in cluster/Cluster.cpp in Apache Qpid, as used in Red Hat Enterprise MRG before 1.3 and other products, allows remote attackers to cause a denial of service (daemon crash and cluster outage) via invalid AMQP data.
Frequently asked questions
- What is CVE-2009-5005?
- The Cluster::deliveredEvent function in cluster/Cluster.cpp in Apache Qpid, as used in Red Hat Enterprise MRG before 1.3 and other products, allows remote attackers to cause a denial of service (daemon crash and cluster outage) via invalid AMQP data.
- How severe is CVE-2009-5005?
- CVE-2009-5005 has a CVSS 2.0 base score of 5.0, rated medium severity.
- Is CVE-2009-5005 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 6% (92nd percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2009-5005?
- CVE-2009-5005 primarily affects Redhat Enterprise Mrg. In total, 9 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2009-5005?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2009-5005 published?
- CVE-2009-5005 was published on 2010-10-18 and last updated on 2026-06-16.
References
- http://secunia.com/advisories/41710
- http://secunia.com/advisories/41812
- http://svn.apache.org/viewvc?revision=785788&view=revision
- http://www.vupen.com/english/advisories/2010/2684
- https://bugzilla.redhat.com/show_bug.cgi?id=642373
- https://rhn.redhat.com/errata/RHSA-2010-0773.html
- https://rhn.redhat.com/errata/RHSA-2010-0774.html
Affected products (9)
- cpe:2.3:a:apache:qpid:*:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_mrg:*:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_mrg:1.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_mrg:1.0.1:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_mrg:1.0.2:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_mrg:1.0.3:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_mrg:1.1.1:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_mrg:1.1.2:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_mrg:1.2:*:*:*:*:*:*:*
More vulnerabilities in Redhat Enterprise Mrg
- CVE-2012-3460 — Critical (CVSS 9.8): cumin: At installation postgresql database user created without password
- CVE-2018-16884 — High (CVSS 8.0): A flaw was found in the Linux kernel's NFS41+ subsystem. NFS41+ shares mounted in different network namespaces at the…
- CVE-2020-27786 — High (CVSS 7.8): A flaw was found in the Linux kernel’s implementation of MIDI, where an attacker with a local account and the…
- CVE-2020-10757 — High (CVSS 7.8): A flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge Pages. This flaw…
- CVE-2017-7482 — High (CVSS 7.8): In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the…
- CVE-2012-1097 — High (CVSS 7.8): The regset (aka register set) feature in the Linux kernel before 3.2.10 does not properly handle the absence of .get…