[QPID-7947] [CVE-2017-15701] [Java Broker] [AMQP 1.0] Improve handling of empty and overlarge frames

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: qpid-java-broker-7.0.0, qpid-java-6.1.5
• Component/s: Broker-J
• Assignee: Keith Wall
• Reporter: Robert Godfrey
• Created: 02/Oct/17 21:45
• Updated: 02/Oct/19 19:22
• Resolved: 10/Oct/17 08:29

Description

Empty frames should only be allowed for AMQP (and not SASL) transports. Overlarge frames should be detected as soon as possible.

Issue Links

• links to: CVE-2017-15701