CVE-2016-3094

CVE-2016-3094 describes a denial-of-service vulnerability in Apache Qpid Java before version 6.0.3. When the broker is configured for plaintext passwords, a remote attacker can trigger an uncaught exception and terminate the broker via a crafted authentication attempt. This medium-severity vulnerability has a CVSS score of 5.9, indicating a network-based attack with high impact on availability and high attack complexity. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.