https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 18:16:53 +0000 https://cve.radiocsirt.org/vuln/cnvd-2021-08895 cnvd-2021-08895 https://cve.radiocsirt.org/vuln/cnvd-2021-08895 https://cve.radiocsirt.org/vuln/euvd-2026-46414 EUVD-2026-46414 https://cve.radiocsirt.org/vuln/euvd-2026-46414 https://cve.radiocsirt.org/vuln/fkie_cve-2020-27217 <p>In Eclipse Hono version 1.3.0 and 1.4.0 the AMQP protocol adapter does not verify the size of AMQP messages received from devices. In particular, a device may send messages that are bigger than the max-message-size that the protocol adapter has indicated during link establishment. While the AMQP 1.0 protocol explicitly disallows a peer to send such messages, a hand crafted AMQP 1.0 client could exploit this behavior in order to send a message of unlimited size to the adapter, eventually causing the adapter to fail with an out of memory exception.</p> <p>In Eclipse Hono version 1.3.0 and 1.4.0 the AMQP protocol adapter does not verify the size of AMQP messages received from devices. In particular, a device may send messages that are bigger than the max-message-size that the protocol adapter has indicated during link establishment. While the AMQP 1.0 protocol explicitly disallows a peer to send such messages, a hand crafted AMQP 1.0 client could exploit this behavior in order to send a message of unlimited size to the adapter, eventually causing the adapter to fail with an out of memory exception.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-27217 https://cve.radiocsirt.org/vuln/ghsa-9f52-hpvw-v96w <p><strong>Affected:</strong> Maven: org.eclipse.hono:hono-core</p> <p>In Eclipse Hono version 1.3.0 and 1.4.0 the AMQP protocol adapter does not verify the size of AMQP messages received from devices. In particular, a device may send messages that are bigger than the max-message-size that the protocol adapter has indicated during link establishment. While the AMQP 1.0 protocol explicitly disallows a peer to send such messages, a hand crafted AMQP 1.0 client could exploit this behavior in order to send a message of unlimited size to the adapter, eventually causing the adapter to fail with an out of memory exception.</p> <p><strong>Affected:</strong> Maven: org.eclipse.hono:hono-core</p> <p>In Eclipse Hono version 1.3.0 and 1.4.0 the AMQP protocol adapter does not verify the size of AMQP messages received from devices. In particular, a device may send messages that are bigger than the max-message-size that the protocol adapter has indicated during link establishment. While the AMQP 1.0 protocol explicitly disallows a peer to send such messages, a hand crafted AMQP 1.0 client could exploit this behavior in order to send a message of unlimited size to the adapter, eventually causing the adapter to fail with an out of memory exception.</p> https://cve.radiocsirt.org/vuln/ghsa-9f52-hpvw-v96w https://cve.radiocsirt.org/vuln/gsd-2020-27217 gsd-2020-27217 https://cve.radiocsirt.org/vuln/gsd-2020-27217