Artemis CVEs and Security Vulnerabilities

CVE-2021-4040

Broker: Malformed message can result in partial DoS (OOM)

A flaw was found in AMQ Broker. This issue can cause a partial interruption to the availability of AMQ Broker via an Out of memory (OOM) condition. This flaw allows an attacker to partially disrupt availability to the broker through a sustained attack of maliciously crafted messages. The highest threat from this vulnerability is system availability.

CVSS 3.1 · 5.3 Medium EPSS 3.4% KEV · Not listed

Vendors

Apache Redhat

Products

Artemis Amq Broker

CVE-2022-23913

Apache ActiveMQ Artemis DoS

In Apache ActiveMQ Artemis prior to 2.20.0 or 2.19.1, an attacker could partially disrupt availability (DoS) through uncontrolled resource consumption of memory.

CVSS 3.1 · 7.5 High EPSS 2.8% KEV · Not listed

Vendors

Apache Netapp Redhat

Products

Artemis Active Iq Unified Manager Oncommand Workflow Automation and 6 more

Search vulnerabilities

Broker: Malformed message can result in partial DoS (OOM)

Apache ActiveMQ Artemis DoS