« Volver al listado

CVE-2016-4467

Estado: ModificadaMedia (5.9)—

The C client and C-based client bindings in the Apache Qpid Proton library before 0.13.1 on Windows do not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate when using the SChannel-based security layer, which allows man-in-the-middle attackers to spoof servers via an arbitrary valid certificate.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Apache — Qpid Proton

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2016-4467",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 5.9,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "HIGH",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 2.2
      }
    ]
  },
  "affected": [
    {
      "source": "secalert@redhat.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2017-05-02T14:59:00.377",
  "references": [
    {
      "url": "http://www.openwall.com/lists/oss-security/2016/07/15/3",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/91788",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.securitytracker.com/id/1036316",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://lists.apache.org/thread.html/914424e4d798a340f523b6169aaf39b626971d9bb00fcdeb1d5d6c0d%40%3Ccommits.qpid.apache.org%3E",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2016/07/15/3",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/91788",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id/1036316",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://lists.apache.org/thread.html/914424e4d798a340f523b6169aaf39b626971d9bb00fcdeb1d5d6c0d%40%3Ccommits.qpid.apache.org%3E",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-295"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The C client and C-based client bindings in the Apache Qpid Proton library before 0.13.1 on Windows do not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate when using the SChannel-based security layer, which allows man-in-the-middle attackers to spoof servers via an arbitrary valid certificate."
    },
    {
      "lang": "es",
      "value": "El cliente en C y basado en C, en la librería Apache Qpid Proton anterior a la versión 0.13.1 en Windows no verifica correctamente que el nombre de host del servidor coincide con un nombre de dominio en el Common Name (CN) del asunto o en el campo subjectAltName del certificado X.509 cuando se utiliza una capa de seguridad basada en SChannel, lo que permite a atacantes miTm suplantar servidores a través de un certificado válido."
    }
  ],
  "lastModified": "2026-06-17T00:47:36.693",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:apache:qpid_proton:0.8.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "90B156C2-FD78-4A3A-8E26-75DBA6A00D61"
            },
            {
              "criteria": "cpe:2.3:a:apache:qpid_proton:0.9.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2F62AAC3-078F-45D1-B9FF-0FE4971B9C41"
            },
            {
              "criteria": "cpe:2.3:a:apache:qpid_proton:0.9.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4ECBD65D-8542-432A-87EC-72D3B239ECF1"
            },
            {
              "criteria": "cpe:2.3:a:apache:qpid_proton:0.10.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9B228312-F769-4D6D-90A6-52AC8BEE8BD2"
            },
            {
              "criteria": "cpe:2.3:a:apache:qpid_proton:0.11.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2F435AEE-1557-4BD9-8D88-EFA43CD26DFF"
            },
            {
              "criteria": "cpe:2.3:a:apache:qpid_proton:0.11.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C0E61102-D4E4-4FA5-B0E9-F1C808CA6AAA"
            },
            {
              "criteria": "cpe:2.3:a:apache:qpid_proton:0.12.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CF0AF641-5A93-4D4A-9AB7-7589430DD682"
            },
            {
              "criteria": "cpe:2.3:a:apache:qpid_proton:0.12.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7262B711-9743-4CC6-B53F-83BA0C4FB443"
            },
            {
              "criteria": "cpe:2.3:a:apache:qpid_proton:0.12.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2CBF37EB-D891-41BB-8F7B-BEFB9EB77EEF"
            },
            {
              "criteria": "cpe:2.3:a:apache:qpid_proton:0.13.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3CA430B4-3D49-4AAE-AF38-7765E679BF0F"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secalert@redhat.com"
}