| Package | Affected versions | Patched versions |
|---|---|---|
| org.apache.activemq:artemis-native | < 2.4.0 | 2.4.0 |
| org.hornetq:hornetq-server | < 2.4.0.Final | 2.4.0.Final |
| artemis | < 2.4.0 | 2.4.0 |
| hornetq | < 2.4.0 | 2.4.0 |
| jboss enterprise application platform | = 6.0.0= 6.4.0= 7.1.0 |
It was found that when Artemis and HornetQ before 2.4.0 are configured with UDP discovery and JGroups discovery a huge byte array is created when receiving an unexpected multicast message. This may result in a heap memory exhaustion, full GC, or OutOfMemoryError.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free