CVE-2012-4458

CVE-2012-4458 describes a denial-of-service vulnerability in Apache Qpid versions 0.20 and earlier. A remote attacker can exploit this by sending a connection.start-ok message with a large number of zero-width elements in the client-properties map, leading to excessive memory consumption and a server crash. This vulnerability has a CVSS score of 5.0, indicating a medium severity with low attack complexity and potential for partial availability impact. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.