GHSA-9wcx-326r-7j7w

Suggest an improvement
Source
https://github.com/advisories/GHSA-9wcx-326r-7j7w
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-9wcx-326r-7j7w/GHSA-9wcx-326r-7j7w.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-9wcx-326r-7j7w
Aliases
Published
2022-05-17T05:35:59Z
Modified
2024-12-07T05:41:01Z
Summary
Denial of Service in Apache ActiveMQ
Details

Apache ActiveMQ before 5.6.0 allows remote attackers to cause a denial of service (file-descriptor exhaustion and broker crash or hang) by sending many openwire failover:tcp:// connection requests.

Database specific 
{
    "cwe_ids":  [],
    "github_reviewed":  true,
    "github_reviewed_at":  "2022-07-13T18:26:49Z",
    "nvd_published_at":  "2012-01-05T16:55:00Z",
    "severity":  "MODERATE"
}
References

Affected packages

Maven / org.apache.activemq:activemq-core

Package

Name
org.apache.activemq:activemq-core
View open source insights on deps.dev
Purl
pkg:maven/org.apache.activemq/activemq-core

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.6.0

Affected versions

4.*
4.1.1
4.1.2
5.*
5.0.0
5.1.0
5.2.0
5.3.0
5.3.1
5.3.2
5.4.0
5.4.1
5.4.2
5.4.3
5.5.0
5.5.1

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-9wcx-326r-7j7w/GHSA-9wcx-326r-7j7w.json"