CVE-2011-4905

2012-01-0516:55:00

CWE-399

[email protected]

web.nvd.nist.gov

cve-2011-4905

apache activemq

denial of service

nvd

8.2 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.008 Low

EPSS

Percentile

82.1%

JSON

Apache ActiveMQ before 5.6.0 allows remote attackers to cause a denial of service (file-descriptor exhaustion and broker crash or hang) by sending many openwire failover:tcp:// connection requests.

CPENameOperatorVersion
apache:activemqapache activemqeq5.3.0
apache:activemqapache activemqeq4.1.0
apache:activemqapache activemqeq1.2
apache:activemqapache activemqeq5.4.3
apache:activemqapache activemqeq5.4.0
apache:activemqapache activemqeq1.5
apache:activemqapache activemqeq3.2.1
apache:activemqapache activemqeq4.1.2
apache:activemqapache activemqeq5.4.1
apache:activemqapache activemqeq1.3

CPE	Name	Operator	Version
apache:activemq	apache activemq	eq	5.3.0
apache:activemq	apache activemq	eq	4.1.0
apache:activemq	apache activemq	eq	1.2
apache:activemq	apache activemq	eq	5.4.3
apache:activemq	apache activemq	eq	5.4.0
apache:activemq	apache activemq	eq	1.5
apache:activemq	apache activemq	eq	3.2.1
apache:activemq	apache activemq	eq	4.1.2
apache:activemq	apache activemq	eq	5.4.1
apache:activemq	apache activemq	eq	1.3