Skip to content
OpenAdvisories
Medium · 5.3 CVE-2021-4040 EUVD-2022-6556GHSA-gf8c-j759-86mg

org.apache.activemq:artemis-core-client Vulnerable to Out-of-Bounds Write

Published Aug 24, 2022 · Updated Aug 3, 2024 · Assigned by redhat

Description

A flaw was found in AMQ Broker. This issue can cause a partial interruption to the availability of AMQ Broker via an Out of memory (OOM) condition. This flaw allows an attacker to partially disrupt availability to the broker through a sustained attack of maliciously crafted messages. The highest threat from this vulnerability is system availability.

Affected products

VendorProductAffectedFixed
— AMQ Broker Fixed in v2.19.1, v2.20.0 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.apache.activemq:artemis-core-client < 2.19.1 2.19.1 GHSA-gf8c-j759-86mg

References