GHSA-pr38-qpxm-g88x

Apache ActiveMQ Artemis Uncontrolled Resource Consumption (DoS)

Source: GitHub Advisory Database (reviewed) High CVE-2022-23913

Packages

Ecosystem	Package	Affected	Fixed in
Maven	org.apache.activemq:artemis-core-client	< 2.19.1	2.19.1

Details

As written in the advisory (Markdown source, shown as plain text).

In Apache ActiveMQ Artemis prior to 2.20.0 or 2.19.1, an attacker could partially disrupt availability (DoS) through uncontrolled resource consumption of memory.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2022-23913 advisory
https://github.com/github/codeql-java-CVE-coverage/issues/1061 web
https://github.com/apache/activemq-artemis/pull/3862 web
https://github.com/apache/activemq-artemis/pull/3862/commits/1f92368240229b8f5db92a92a72c703faf83e9b7 web
https://github.com/apache/activemq-artemis/pull/3871 web
https://github.com/apache/activemq-artemis/pull/3871/commits/153d2e9a979aead8dff95fbc91d659ecc7d0fb82 web
https://github.com/apache/activemq-artemis package
https://issues.apache.org/jira/browse/ARTEMIS-3593 web
https://lists.apache.org/thread/fjynj57rd99s814rdn5hzvmx8lz403q2 web
https://security.netapp.com/advisory/ntap-20220303-0003 web