CVE-2015-0203

CVE-2015-0203 describes a denial-of-service vulnerability affecting the qpidd broker in Apache Qpid versions 0.30 and earlier. Remote authenticated users can crash the daemon by sending specially crafted AMQP messages containing invalid sequence set ranges, inappropriate content-bearing methods, or out-of-order session control messages. This medium-severity vulnerability (CVSS 6.5) is easily exploitable over the network with low privileges, leading to high availability impact. While there is no evidence of active exploitation or public exploit code, the vulnerability has garnered some community discussion and media coverage.