{"id":"CVE-2026-115942","kind":"vulnerability","aliases":["CVE-2026-115942"],"related":[],"title":"Apache Qpid Proton C: misconfigured wildcard TLS certificate causes stack read overflow","description":"A misconfigured wildcard TLS certificate causes a stack read overflow.\n\n\n\nThis issue does not affect any wildcard certificate issued to the RFC9525 standard - the fix only accepts certificates that comply to this standard.\n\n\n\nThis issue affects Apache Qpid Proton C: through 0.40.0.\n\n\n\nUsers are recommended to upgrade to version 0.41.1, which fixes the issue.","summary":"A misconfigured wildcard TLS certificate causes a stack read overflow in Apache Qpid Proton C through 0.40.0. The sources do not state what an attacker can get beyond reading past a stack buffer.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apache-qpid-proton","messaging","package","tls"],"not_affected_if":["rfc9525-wildcard-certificates"],"how_to_check":"- Check the installed Apache Qpid Proton C version (for example `pkg-config --modversion libqpid-proton` or the version in your package manifest) and see whether it is `0.40.0` or older\n- Check whether any wildcard TLS certificates in use are issued to the RFC 9525 standard; the sources say certificates issued to that standard are not affected","fix":"- Apache Qpid Proton C: upgrade to `0.41.1`","status":"open","published_at":"2026-10-29T11:17:30+00:00","first_seen_at":"2026-10-29T11:24:28+00:00","triaged_at":"2026-10-29T11:25:41+00:00","updated_at":"2026-10-29T11:25:41+00:00","category":"package","confidence":0.5,"triage":{"at":"2026-10-29T11:25:41Z","model":"claude-haiku-5-5","output":{"fix":"- Apache Qpid Proton C: upgrade to `0.41.1`","reach":"unknown","title":"Apache Qpid Proton C: misconfigured wildcard TLS certificate causes stack read overflow","impact":"low","summary":"A misconfigured wildcard TLS certificate causes a stack read overflow in Apache Qpid Proton C through 0.40.0. The sources do not state what an attacker can get beyond reading past a stack buffer.","audience":"developers","category":"package","nicknames":[],"who_cares":["apache-qpid-proton","tls","messaging"],"confidence":0.5,"fix_status":"available","needs_auth":"unknown","worst_case":"unknown; sources describe only a stack read overflow","analyst_note":"Confirm the exploit trigger, impact and CVSS score from the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-115942 and the Apache Qpid Proton advisory.","how_to_check":"- Check the installed Apache Qpid Proton C version (for example `pkg-config --modversion libqpid-proton` or the version in your package manifest) and see whether it is `0.40.0` or older\n- Check whether any wildcard TLS certificates in use are issued to the RFC 9525 standard; the sources say certificates issued to that standard are not affected","plain_action":"","needs_analyst":true,"not_affected_if":["rfc9525-wildcard-certificates"],"who_is_affected":"Applications that link Apache Qpid Proton C through 0.40.0 and handle wildcard TLS certificates that are not issued to the RFC 9525 standard. The sources say wildcard certificates issued to RFC 9525 are not affected, so teams using only such certificates can skip it. Exposure from the network side is not stated.","user_interaction":"unknown","needs_special_setup":"yes","severity_if_unknown":"unknown"},"cost_usd":0.000743,"input_tokens":4133,"output_tokens":659,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-115942':15A,18A '-2026':14A,17A '0.40.0':42B,100C '0.41.1':108C 'accept':85C 'affect':73C,94C 'apach':1A,20B,37B,95C 'apache-qpid-proton':19B 'attack':50B 'beyond':53B 'buffer':58B 'c':4A,40B,98C 'caus':9A,31B,64C 'certif':8A,30B,63C,76C,86C 'compli':88C 'cve':13A,16A 'fix':83C,110C 'get':52B 'issu':70C,77C,93C,112C 'messag':23B 'misconfigur':5A,27B,60C 'overflow':12A,35B,68C 'packag':24B 'past':55B 'proton':3A,22B,39B,97C 'qpid':2A,21B,38B,96C 'read':11A,34B,54B,67C 'recommend':103C 'rfc9525':80C 'sourc':44B 'stack':10A,33B,57B,66C 'standard':81C,91C 'state':47B 'tls':7A,25B,29B,62C 'upgrad':105C 'user':101C 'version':107C 'wildcard':6A,28B,61C,75C","nicknames":[],"mitigations":[],"who_affected":"Applications that link Apache Qpid Proton C through 0.40.0 and handle wildcard TLS certificates that are not issued to the RFC 9525 standard. The sources say wildcard certificates issued to RFC 9525 are not affected, so teams using only such certificates can skip it. Exposure from the network side is not stated.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"developers","plain_action":null,"first_public_at":"2026-10-29T11:17:30+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-115942","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-115942","severity":null,"published_at":"2026-10-29T11:17:30+00:00","modified_at":"2026-10-29T11:17:30+00:00","first_seen_at":"2026-10-29T11:24:28+00:00","fetched_at":"2026-10-29T11:24:28+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}