CVE-2021-4040
published 2022-08-24CVE-2021-4040: A flaw was found in AMQ Broker. This issue can cause a partial interruption to the availability of AMQ Broker via an Out of memory (OOM) condition. This flaw…
PriorityP429medium5.3CVSS 3.1
AVNACLPRNUINSUCNINAL
EPSS
2.50%
83.0th percentile
A flaw was found in AMQ Broker. This issue can cause a partial interruption to the availability of AMQ Broker via an Out of memory (OOM) condition. This flaw allows an attacker to partially disrupt availability to the broker through a sustained attack of maliciously crafted messages. The highest threat from this vulnerability is system availability.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache | artemis | < 2.19.1 | 2.19.1 |
| redhat | amq_broker | < 7.10.0 | 7.10.0 |
| redhat | amq_broker | — | — |
CVSS provenance
nvdv3.15.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
vendor_redhat5.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
org.apache.activemq:artemis-core-client Vulnerable to Out-of-Bounds Write
ghsa·2022-08-25
CVE-2021-4040 [MEDIUM] CWE-400 org.apache.activemq:artemis-core-client Vulnerable to Out-of-Bounds Write
org.apache.activemq:artemis-core-client Vulnerable to Out-of-Bounds Write
A flaw was found in AMQ Broker. This issue can cause a partial interruption to the availability of AMQ Broker via an Out of memory (OOM) condition. This flaw allows an attacker to partially disrupt availability to the broker through a sustained attack of maliciously crafted messages. The highest threat from this vulnerability is system availability.
OSV
org.apache.activemq:artemis-core-client Vulnerable to Out-of-Bounds Write
osv·2022-08-25
CVE-2021-4040 [MEDIUM] org.apache.activemq:artemis-core-client Vulnerable to Out-of-Bounds Write
org.apache.activemq:artemis-core-client Vulnerable to Out-of-Bounds Write
A flaw was found in AMQ Broker. This issue can cause a partial interruption to the availability of AMQ Broker via an Out of memory (OOM) condition. This flaw allows an attacker to partially disrupt availability to the broker through a sustained attack of maliciously crafted messages. The highest threat from this vulnerability is system availability.
Red Hat
Broker: Malformed message can result in partial DoS (OOM)
vendor_redhat·2021-11-19·CVSS 5.3
CVE-2021-4040 [MEDIUM] CWE-400 Broker: Malformed message can result in partial DoS (OOM)
Broker: Malformed message can result in partial DoS (OOM)
A flaw was found in AMQ Broker. This issue can cause a partial interruption to the availability of AMQ Broker via an Out of memory (OOM) condition. This flaw allows an attacker to partially disrupt availability to the broker through a sustained attack of maliciously crafted messages. The highest threat from this vulnerability is system availability.
A flaw was found in AMQ Broker. This issue can cause a partial interruption to the availability of AMQ Broker via an Out of memory (OOM) condition. This flaw allows an attacker to partially disrupt availability to the broker through a sustained attack of maliciously crafted messages. The highest threat from this vulnerability is system availability.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://access.redhat.com/security/cve/CVE-2021-4040https://bugzilla.redhat.com/show_bug.cgi?id=2028254https://github.com/apache/activemq-artemis/pull/3871/commitshttps://issues.apache.org/jira/browse/ARTEMIS-3593https://access.redhat.com/security/cve/CVE-2021-4040https://bugzilla.redhat.com/show_bug.cgi?id=2028254https://github.com/apache/activemq-artemis/pull/3871/commitshttps://issues.apache.org/jira/browse/ARTEMIS-3593
2022-08-24
Published