CVE-2011-4905
published 2012-01-05CVE-2011-4905: Apache ActiveMQ before 5.6.0 allows remote attackers to cause a denial of service (file-descriptor exhaustion and broker crash or hang) by sending many…
PriorityP424medium5CVSS 2.0
AVNACLAuNCNINAP
EPSS
8.98%
94.7th percentile
Apache ActiveMQ before 5.6.0 allows remote attackers to cause a denial of service (file-descriptor exhaustion and broker crash or hang) by sending many openwire failover:tcp:// connection requests.
Affected
34 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache | activemq | <= 5.5.1 | — |
| apache | activemq | — | — |
| apache | activemq | — | — |
| apache | activemq | — | — |
| apache | activemq | — | — |
| apache | activemq | — | — |
| apache | activemq | — | — |
| apache | activemq | — | — |
| apache | activemq | — | — |
| apache | activemq | — | — |
| apache | activemq | — | — |
| apache | activemq | — | — |
| apache | activemq | — | — |
| apache | activemq | — | — |
| apache | activemq | — | — |
| apache | activemq | — | — |
| apache | activemq | — | — |
| apache | activemq | — | — |
| apache | activemq | — | — |
| apache | activemq | — | — |
| apache | activemq | — | — |
| apache | activemq | — | — |
| apache | activemq | — | — |
| apache | activemq | — | — |
| apache | activemq | — | — |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv5.0MEDIUM
vendor_debian5.0MEDIUM
vendor_redhat5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
ActiveMQ: flaw within failover mechanism when handling openwire requests can lead to DoS
vendor_redhat·2011-04-22·CVSS 5.0
CVE-2011-4905 [MEDIUM] ActiveMQ: flaw within failover mechanism when handling openwire requests can lead to DoS
ActiveMQ: flaw within failover mechanism when handling openwire requests can lead to DoS
Apache ActiveMQ before 5.6.0 allows remote attackers to cause a denial of service (file-descriptor exhaustion and broker crash or hang) by sending many openwire failover:tcp:// connection requests.
Statement: Not vulnerable. Apache ActiveMQ is not shipped with any supported Red Hat products.
Package: unspecified (Red Hat JBoss BRMS 5) - Under investigation
Debian
CVE-2011-4905: activemq - Apache ActiveMQ before 5.6.0 allows remote attackers to cause a denial of servic...
vendor_debian·2011·CVSS 5.0
CVE-2011-4905 [MEDIUM] CVE-2011-4905: activemq - Apache ActiveMQ before 5.6.0 allows remote attackers to cause a denial of servic...
Apache ActiveMQ before 5.6.0 allows remote attackers to cause a denial of service (file-descriptor exhaustion and broker crash or hang) by sending many openwire failover:tcp:// connection requests.
Scope: local
bookworm: resolved (fixed in 5.5.0+dfsg-5)
bullseye: resolved (fixed in 5.5.0+dfsg-5)
sid: resolved (fixed in 5.5.0+dfsg-5)
trixie: resolved (fixed in 5.5.0+dfsg-5)
GHSA
Denial of Service in Apache ActiveMQ
ghsa·2022-05-17
CVE-2011-4905 [MEDIUM] Denial of Service in Apache ActiveMQ
Denial of Service in Apache ActiveMQ
Apache ActiveMQ before 5.6.0 allows remote attackers to cause a denial of service (file-descriptor exhaustion and broker crash or hang) by sending many openwire failover:tcp:// connection requests.
OSV
Denial of Service in Apache ActiveMQ
osv·2022-05-17
CVE-2011-4905 [MEDIUM] Denial of Service in Apache ActiveMQ
Denial of Service in Apache ActiveMQ
Apache ActiveMQ before 5.6.0 allows remote attackers to cause a denial of service (file-descriptor exhaustion and broker crash or hang) by sending many openwire failover:tcp:// connection requests.
OSV
CVE-2011-4905: Apache ActiveMQ before 5
osv·2012-01-05·CVSS 5.0
CVE-2011-4905 [MEDIUM] CVE-2011-4905: Apache ActiveMQ before 5
Apache ActiveMQ before 5.6.0 allows remote attackers to cause a denial of service (file-descriptor exhaustion and broker crash or hang) by sending many openwire failover:tcp:// connection requests.
No detection rules found.
No public exploits indexed.
http://openwall.com/lists/oss-security/2011/12/25/2http://openwall.com/lists/oss-security/2011/12/25/6http://secunia.com/advisories/47112http://svn.apache.org/viewvc?view=revision&revision=1209700http://svn.apache.org/viewvc?view=revision&revision=1211844http://www.securityfocus.com/bid/50904https://issues.apache.org/jira/browse/AMQ-3294http://openwall.com/lists/oss-security/2011/12/25/2http://openwall.com/lists/oss-security/2011/12/25/6http://secunia.com/advisories/47112http://svn.apache.org/viewvc?view=revision&revision=1209700http://svn.apache.org/viewvc?view=revision&revision=1211844http://www.securityfocus.com/bid/50904https://issues.apache.org/jira/browse/AMQ-3294
2012-01-05
Published