~ / search / GHSA-jpv3-g4cc-6vfx

GHSA-jpv3-g4cc-6vfx

Improper Control of Generation of Code ('Code Injection') in org.apache.activemq:activemq-client

Source: GitHub Advisory Database (reviewed) High CVE-2019-0222

Packages

EcosystemPackageAffectedFixed in
Maven org.apache.activemq:activemq-client >= 5.0.0, < 5.15.9 5.15.9

Details

As written in the advisory (Markdown source, shown as plain text).

In Apache ActiveMQ 5.0.0 - 5.15.8, unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive.

References

External links from the advisory. They lead to third-party sites.