Vulnerabilidades de Apache Software Foundation Apache ActiveMQ Client (CVE)

Registros CVE publicados para Apache Software Foundation Apache ActiveMQ Client, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

4 resultados

7.5Alta

CVE-2026-50734 hace 4 meses

Apache ActiveMQ Client, Apache ActiveMQ, Apache ActiveMQ All: Pre-authentication OpenWire memory-allocation DoS during wire format negotiation

Apache Software Foundation Apache ActiveMQ Client; Apache Software Foundation Apache ActiveMQ; Apache Software Foundation Apache ActiveMQ All

Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ Client, Apache ActiveMQ, Apache ActiveMQ All. An unauthenticated network attacker can cause a broker DoS by sending a crafted WireFormatInfo frame with a malicious large size value.…

7.5Alta

CVE-2026-53917 hace 4 meses

Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Client, Apache ActiveMQ Broker: Unbounded memory allocation in OpenWire property unmarshalling

Apache Software Foundation Apache ActiveMQ; Apache Software Foundation Apache ActiveMQ All; Apache Software Foundation Apache ActiveMQ Client; Apache Software Foundation Apache ActiveMQ Broker

Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Client, Apache ActiveMQ Broker. An authenticated user can cause a broker DoS by sending a crafted OpenWire Message with a large encoded size va…

7.5Alta

CVE-2026-39304 hace 7 meses

Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Incorrect handling of TLSv1.3 KeyUpdate can be exploited to cause DoS via OOM

Apache Software Foundation Apache ActiveMQ Client; Apache Software Foundation Apache ActiveMQ Broker; Apache Software Foundation Apache ActiveMQ All; Apache Software Foundation Apache ActiveMQ

Denial of Service via Out of Memory vulnerability in Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ. ActiveMQ NIO SSL transports do not correctly handle TLSv1.3 handshake KeyUpdates triggered by clients. This makes it possible for a client t…

4.3Media

CVE-2026-33227 hace 7 meses

Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ Web, Apache ActiveMQ: Improper Limitation of a Pathname to a Restricted Classpath Directory

Apache Software Foundation Apache ActiveMQ Client; Apache Software Foundation Apache ActiveMQ Broker; Apache Software Foundation Apache ActiveMQ All; Apache Software Foundation Apache ActiveMQ Web

Improper validation and restriction of a classpath path name vulnerability in Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ Web, Apache ActiveMQ. In two instances (when creating a Stomp consumer and also browsing m…