Vulnerabilidades de Apache Software Foundation Apache ActiveMQ Stomp (CVE)

Registros CVE publicados para Apache Software Foundation Apache ActiveMQ Stomp, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

2 resultados

7.5Alta

CVE-2026-49432 hace 4 meses

Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp: STOMP negative content-length enables denial of service

Apache Software Foundation Apache ActiveMQ; Apache Software Foundation Apache ActiveMQ All; Apache Software Foundation Apache ActiveMQ Stomp

Improper Input Validation vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp. A remote unauthenticated peer that can reach an exposed STOMP connector can trigger denial-of-service behavior by sending a negative content-length. For t…

7.5Alta

CVE-2026-53916 hace 4 meses

Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp: Unbounded header buffer in STOMP NIO codec

Apache Software Foundation Apache ActiveMQ; Apache Software Foundation Apache ActiveMQ All; Apache Software Foundation Apache ActiveMQ Stomp

Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp. An unauthenticated client that opens a STOMP NIO connection can send header bytes that never terminate which makes the broker buffer th…