CVE-2012-4458: The AMQP type decoder in Apache Qpid 0.20 and earlier allows remote attackers to cause a denial of service...

Security readout for executives and security teams

CVE-2012-4458 is a remote denial-of-service issue in Apache Qpid 0.20 and earlier. A malicious AMQP connection can make the broker consume excessive memory and crash. The business impact is service availability loss for systems that depend on Qpid message brokering. Exposure is most likely where Apache Qpid 0.20 or earlier accepts AMQP client connections from untrusted or broad networks. Internal-only brokers still matter if compromised hosts can connect. Treat as a service reliability risk for any business process relying on Apache Qpid. Prioritize remediation when brokers are internet-facing, partner-facing, or support critical workflows. Mitigation focus: Inventory Apache Qpid deployments and identify versions 0.20 or earlier.; Upgrade to a vendor-supported version containing the QPID-4629 fix.; Apply relevant Red Hat advisory packages where Red Hat-distributed Qpid is used..

Prepared

Jun 15, 2026, 04:24 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.