Severity: low Affected versions:
- Apache Qpid Proton C through 0.40.0 Description: A misconfigured wildcard TLS certificate causes a stack read overflow. This issue does not affect any wildcard certificate issued to the RFC9525 standard - the fix only accepts certificates that comply to this standard. This issue affects Apache Qpid Proton C: through 0.40.0. Users are recommended to upgrade to version 0.41.1, which fixes the issue. This issue is being tracked as PROTON-2974 Credit: [email protected] (finder) References: https://qpid.apache.org/ https://www.cve.org/CVERecord?id=CVE-2026-115942 https://issues.apache.org/jira/browse/PROTON-2974
