PT-2019-5289 · Apache+2 · Apache Activemq+2
Publicado
2019-03-28
·
Atualizado
2024-03-07
·
CVE-2019-0222
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Apache ActiveMQ versions 5.0.0 through 5.15.8
Description
The issue is related to the incorrect handling of code generation in the implementation of the MQTT protocol in Apache ActiveMQ. This can lead to a broker Out of Memory exception, making it unresponsive, when unmarshalling a corrupt MQTT frame. The exploitation of this issue can allow a remote attacker to cause a denial of service.
Recommendations
For Apache ActiveMQ versions 5.0.0 through 5.15.8, update to a version that includes the fix for this issue to prevent the broker from becoming unresponsive due to an Out of Memory exception.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Code Injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Apache Activemq
Linuxmint
Ubuntu