You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@activemq.apache.org by Justin Bertram <jb...@apache.org> on 2022/02/03 19:54:25 UTC

[ANNOUNCE] CVE-2022-23913: Apache ActiveMQ Artemis DoS

Description:

In Apache ActiveMQ Artemis prior to 2.20.0 or 2.19.1, an attacker could
partially disrupt availability (DoS) through uncontrolled resource
consumption of memory.


This issue is being tracked as:

https://issues.apache.org/jira/browse/ARTEMIS-3593


Mitigation:

Upgrade to Apache ActiveMQ Artemis 2.20.0 or 2.19.1 (if you're still using
Java 8).