Not rated
CVE-2019-0222 In Apache ActiveMQ 5.0.0 - 5.15.8, unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it…
Description
In Apache ActiveMQ 5.0.0 - 5.15.8, unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache ActiveMQ | Versions not published |
References
- [activemq-commits] 20190327 [CONF] Apache ActiveMQ > Security Advisories lists.apache.org
- [activemq-users] 20190327 CVE-2019-0222 - Apache ActiveMQ: Corrupt MQTT frame can cause broker shutdown lists.apache.org
- [activemq-commits] 20190327 svn commit: r1042603 - /websites/production/activemq/content/security-advisories.data/CVE-2019-0222-announcement.txt lists.apache.org
- [activemq-dev] 20190327 CVE-2019-0222 - Apache ActiveMQ: Corrupt MQTT frame can cause broker shutdown lists.apache.org
- [oss-security] 20190327 [ANNOUNCE] CVE-2019-0222 - Apache ActiveMQ: Corrupt MQTT frame can cause broker shutdown www.openwall.com
- [activemq-dev] 20190327 Re: Website lists.apache.org
- [activemq-commits] 20190327 svn commit: r1042639 - in /websites/production/activemq/content/activemq-website: ./ projects/artemis/download/ projects/classic/download/ projects/cms/download/ security-advisories.data/ lists.apache.org
- [activemq-dev] 20190328 Re: Website lists.apache.org
- 107622 www.securityfocus.com
- [activemq-commits] 20200514 [activemq-website] branch master updated: Publish CVE-2020-1941 security advisory lists.apache.org
- www.oracle.com www.oracle.com
- www.oracle.com www.oracle.com
- www.oracle.com www.oracle.com
- activemq.apache.org activemq.apache.org
- security.netapp.com security.netapp.com
- [activemq-commits] 20200910 [activemq-website] branch master updated: Publish CVE-2020-11998 lists.apache.org
- [activemq-commits] 20210208 [activemq-website] branch master updated: Publish CVE-2020-13947 lists.apache.org
- [debian-lts-announce] 20210305 [SECURITY] [DLA 2582-1] mqtt-client security update lists.debian.org
- [debian-lts-announce] 20210305 [SECURITY] [DLA 2583-1] activemq security update lists.debian.org
Timeline
- Published
- Last modified