Skip to content

← Public intelligence

Maven package

org.apache.activemq:artemis-core-client

Open actionable advisories and recorded vendor fixes. This public package view has no inventory attached and cannot establish whether your deployment is affected. A vendor fix never resolves your finding; verify your installed version and the source guidance.

Open advisories

2 actionable advisories, newest first. Withdrawn advisories and news are excluded. Coverage is partial.

  1. Medium, CVSS 5.3MavenPublished

    org.apache.activemq:artemis-core-client Vulnerable to Out-of-Bounds Write

    CVE-2021-4040 · GHSA-gf8c-j759-86mg

    Affected
    • Maven org.apache.activemq:artemis-core-client < 2.19.1
    Fixed in
    2.19.1· Vendor fix available
    Issue
    A flaw was found in AMQ Broker. This issue can cause a partial interruption to the availability of AMQ Broker via an Out of memory (OOM) condition. This flaw allows an attacker to partially disrupt availability to the broker through a sustained attack of maliciously crafted messages. The highest threat from this vulnerability is system availability.

    Recommended action: Upgrade to 2.19.1 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.

    Sources:github.comSource checked Evidence →
  2. High, CVSS 7.5MavenPublished

    Apache ActiveMQ Artemis Uncontrolled Resource Consumption (DoS)

    CVE-2022-23913 · GHSA-pr38-qpxm-g88x

    Affected
    • Maven org.apache.activemq:artemis-core-client < 2.19.1
    Fixed in
    2.19.1· Vendor fix available
    Issue
    In Apache ActiveMQ Artemis prior to 2.20.0 or 2.19.1, an attacker could partially disrupt availability (DoS) through uncontrolled resource consumption of memory.

    Recommended action: Upgrade to 2.19.1 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.

    Sources:github.comSource checked Evidence →