Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-115942

Apache Qpid Proton C: Verifying non compliant TLS wildcard cert can cause stack buffer overflow read

Description

A misconfigured wildcard TLS certificate causes a stack read overflow. This issue does not affect any wildcard certificate issued to the RFC9525 standard - the fix only accepts certificates that comply to this standard. This issue affects Apache Qpid Proton C: through 0.40.0. Users are recommended to upgrade to version 0.41.1, which fixes the issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apache Software Foundation Apache Qpid Proton C

Default version status: unaffected

  • 0 to ≤ 0.40.0affected
pkg:software-id/apache.org/qpid-proton

References