You are viewing a plain text version of this content. The canonical link for it is here.

Posted to users@activemq.apache.org by Dejan Bosanac <de...@nighttale.net> on 2019/03/27 12:11:53 UTC

[ANNOUNCE] CVE-2019-0222 - Apache ActiveMQ: Corrupt MQTT frame can cause broker shutdown

The following security vulnerability was reported against Apache
ActiveMQ 5.15.8 and older versions.

Please check the following document and see if you’re affected by the issue.

http://activemq.apache.org/security-advisories.data/CVE-2019-0222-announcement.txt

Apache ActiveMQ 5.15.9 has been released with appropriate fixes and is
available for upgrade.