Skip to content
OpenAdvisories
High · 7.5 CVE-2022-23913 EUVD-2022-1134GHSA-pr38-qpxm-g88x

Apache ActiveMQ Artemis DoS

Published Feb 4, 2022 · Updated Aug 3, 2024 · Assigned by apache

Vendor: Apache Software Foundation Product: Apache ActiveMQ Artemis Package: org.apache.activemq:artemis-core-client Ecosystem: Maven

Description

In Apache ActiveMQ Artemis prior to 2.20.0 or 2.19.1, an attacker could partially disrupt availability (DoS) through uncontrolled resource consumption of memory.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache ActiveMQ Artemis 2.19.0 – < 2.20.0 2.20.0

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
Red Hat Single Sign On 7 rh-sso7 +1 1-5.el9sso RHSA-2022:7411
Red Hat Single Sign On 7 rh-sso7-javapackages-tools +2 6.0.0-7.el9sso RHSA-2022:7411
Red Hat Single Sign On 7 rh-sso7-keycloak +1 18.0.3-1.redhat_00001.1.el7sso RHSA-2022:7411, RHSA-2022:7410, RHSA-2022:7409
Red Hat Jboss Enterprise Application Platform Eus 7 eap7-activemq-artemis +15 1.5.5.016-1.redhat_00001.1.ep7.el7 RHSA-2025:4437, RHSA-2025:4226
Red Hat Jboss Enterprise Application Platform Eus 7 eap7-activemq-artemis-tools 2.9.0-10.redhat_00021.1.el7eap RHSA-2025:4437
Red Hat Jboss Enterprise Application Platform Eus 7 eap7-artemis-native +1 1:1.5.5.016-1.redhat_00001.1.ep7.el7 RHSA-2025:4226
Red Hat Jboss Enterprise Application Platform Eus 7 eap7-gson 2.8.9-1.redhat_00001.1.el7eap RHSA-2025:4437
Red Hat Jboss Enterprise Application Platform Eus 7 eap7-hal-console 3.2.18-1.Final_redhat_00001.1.el7eap RHSA-2025:4437
Red Hat Jboss Enterprise Application Platform Eus 7 eap7-jboss-server-migration +21 1.7.2-14.Final_redhat_00015.1.el7eap RHSA-2025:4437
Red Hat Jboss Enterprise Application Platform Eus 7 eap7-jboss-xnio-base 3.5.11-1.Final_redhat_00001.1.ep7.el7 RHSA-2025:4437, RHSA-2025:4226
Red Hat Jboss Enterprise Application Platform Eus 7 eap7-jsoup 1.14.2-1.redhat_00002.1.ep7.el7 RHSA-2025:4226
Red Hat Jboss Enterprise Application Platform Eus 7 eap7-undertow 1.4.18-14.SP13_redhat_00001.1.ep7.el7 RHSA-2025:4226
Red Hat Jboss Enterprise Application Platform Eus 7 eap7-wildfly +1 7.1.10-2.GA_redhat_00002.1.ep7.el7 RHSA-2025:4437, RHSA-2025:4226
Red Hat Jboss Enterprise Application Platform Eus 7 eap7-wildfly-javadocs +2 7.3.13-4.GA_redhat_00002.1.el7eap RHSA-2025:4437
Red Hat Jboss Enterprise Application Platform Eus 7 eap7-woodstox-core 5.0.3-2.redhat_00002.1.ep7.el7 RHSA-2025:4437, RHSA-2025:4226
Red Hat Jboss Enterprise Application Platform Eus 7 eap7-xml-security 2.0.10-2.redhat_00002.1.ep7.el7 RHSA-2025:4226
Red Hat JBoss EAP 7 eap7-activemq-artemis +15 2.16.0-9.redhat_00042.1.el7eap RHSA-2022:4919, RHSA-2022:4918
Red Hat JBoss EAP 7 eap7-h2database 1.4.197-2.redhat_00004.1.el7eap RHSA-2022:4919, RHSA-2022:4918
Red Hat JBoss EAP 7 eap7-hal-console 3.3.12-1.Final_redhat_00001.1.el7eap RHSA-2022:4919, RHSA-2022:4918
Red Hat JBoss EAP 7 eap7-jackson-databind 2.12.6.1-1.redhat_00003.1.el7eap RHSA-2022:4919, RHSA-2022:4918
Red Hat JBoss EAP 7 eap7-jboss-xnio-base 3.8.7-1.SP1_redhat_00001.1.el7eap RHSA-2022:4919, RHSA-2022:4918
Red Hat JBoss EAP 7 eap7-netty +27 4.1.72-4.Final_redhat_00001.1.el7eap RHSA-2022:4919, RHSA-2022:4918
Red Hat JBoss EAP 7 eap7-undertow 2.2.17-2.SP4_redhat_00001.1.el7eap RHSA-2022:4919, RHSA-2022:4918
Red Hat JBoss EAP 7 eap7-wildfly +4 7.4.5-3.GA_redhat_00001.1.el7eap RHSA-2022:4919, RHSA-2022:4918
Red Hat JBoss EAP 7 eap7-wildfly-http-client +4 1.1.11-1.SP1_redhat_00001.1.el7eap RHSA-2022:4919, RHSA-2022:4918
Red Hat JBoss EAP 7 eap7-xerces-j2 2.12.0-3.SP04_redhat_00001.1.el7eap RHSA-2022:4919, RHSA-2022:4918

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.apache.activemq:artemis-core-client < 2.19.1 2.19.1 GHSA-pr38-qpxm-g88x

Advisories 9

References