← Database

CVE-2026-67554

MEDIUM CVSS: 6.5 Published: 2026-08-05 Modified: 2026-08-07

Description

An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessive CPU usage due to naive range handling, leading to denial of service. This issue affects Apache Qpid Proton-Dotnet: through 1.0.0. Users are recommended to upgrade to version 1.1.0, which fixes the issue.

Affected Platforms

Apache Qpid Proton-Dotnet

Weakness Type

CWE-606

References