CVE-2021-4040: A flaw was found in AMQ Broker. This issue can cause a partial interruption to the availability of AMQ Broker via an Out of memory (OOM) condition. This flaw…

medium5.3CVSS 3.1

AVNACLPRNUINSUCNINAL

A flaw was found in AMQ Broker. This issue can cause a partial interruption to the availability of AMQ Broker via an Out of memory (OOM) condition. This flaw allows an attacker to partially disrupt availability to the broker through a sustained attack of maliciously crafted messages. The highest threat from this vulnerability is system availability.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
apache	activemq_artemis	< 2.19.1	2.19.1
redhat	amq_broker	< 7.10.0	7.10.0
redhat	amq_broker	—	—