Skip to content
OpenAdvisories
Critical DSA-3524-1 1 CVE

activemq - security update

Published Mar 20, 2016 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 7 activemq 5.6.0+dfsg-1+deb7u2
Debian · 8 activemq 5.6.0+dfsg1-4+deb8u2

Vulnerabilities 1

  • Critical 9.8
    CVE-2015-5254 Public exploit EPSS 38%

    Improper Input Validation in Apache ActiveMQ

    Apache ActiveMQ 5.x before 5.13.0 does not restrict the classes that can be serialized in the broker, which allows remote attackers to execute arbitrary code via a crafted serialized Java Message Service (JMS) ObjectMessage object.

    activemq activemq org.apache.activemq:activemq-client Debian Ubuntu Maven