Skip to content
OpenAdvisories
High DLA-2582-1 1 CVE

mqtt-client - security update

Published Mar 5, 2021 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 9 mqtt-client 1.14-1+deb9u1

Vulnerabilities 1

  • High 7.5
    CVE-2019-0222 Public exploit EPSS 12%

    Improper Control of Generation of Code ('Code Injection') in org.apache.activemq:activemq-client

    In Apache ActiveMQ 5.0.0 - 5.15.8, unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive.

    Apache Apache ActiveMQ activemq activemq Debian Ubuntu Maven