Apache Artemis 1.3.0 < 2.45.0 / 2.50.0 < 2.57.0 Denial of Service (CVE-2026-57822)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(344717);
  script_version("1.2");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/09/11");

  script_cve_id("CVE-2026-57822");
  script_xref(name:"IAVA", value:"2026-A-0982");

  script_name(english:"Apache Artemis 1.3.0 < 2.45.0 / 2.50.0 < 2.57.0 Denial of Service (CVE-2026-57822)");

  script_set_attribute(attribute:"synopsis", value:
"The remote host is affected by a denial of service vulnerability.");
  script_set_attribute(attribute:"description", value:
"The version of Apache Artemis (formerly Apache ActiveMQ Artemis) installed on the remote host is
affected by a vulnerability:

  - When the broker is processing message-based management requests, sent by an authenticated
    messaging client that is authorized with MANAGE permission to perform management-via-messaging,
    the parameter processing can trigger Java deserialization of certain method parameters that the
    broker will not utilise. The permitted types allow to craft a payload causing excessive
    computation and pinning the processing thread, leading to denial of service. (CVE-2026-57822)

Versions 1.3.0 through 2.44.0 (Apache ActiveMQ Artemis) and 2.50.0 through 2.56.x
(Apache Artemis) are affected.

Note that Nessus has not tested for this issue but has instead relied only on the application's
self-reported version number.");
  script_set_attribute(attribute:"see_also", value:"https://lists.apache.org/thread/0jmovbbvdo22zq1r91jrlhv02ck7jqzp");
  script_set_attribute(attribute:"solution", value:
"Upgrade to Apache Artemis version 2.57.0 or later.");
  script_set_attribute(attribute:"agent", value:"unix");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:S/C:N/I:N/A:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2026-57822");

  script_set_attribute(attribute:"vuln_publication_date", value:"2026/09/09");
  script_set_attribute(attribute:"patch_publication_date", value:"2026/09/09");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/09/11");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:apache:activemq_artemis");
  script_set_attribute(attribute:"thorough_tests", value:"true");
  script_set_attribute(attribute:"stig_severity", value:"I");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Misc.");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("apache_artemis_nix_installed.nbin");
  script_require_keys("installed_sw/Apache Artemis");

  exit(0);
}

include('vdf.inc');

# @tvdl-content
var vuln_data = {
  'metadata': {'spec_version': '1.0'},
  'checks': [
    {
      'product': {'name': 'Apache Artemis', 'type': 'app'},
      'check_algorithm': 'default',
      'constraints': [
        {'min_version': '1.3.0', 'max_version': '2.44.0', 'fixed_display': '2.57.0'},
        {'min_version': '2.50.0', 'fixed_version': '2.57.0'}
      ]
    }
  ]
};

var result = vdf::check_and_report(vuln_data:vuln_data, severity:SECURITY_WARNING);
vdf::handle_check_and_report_errors(vdf_result:result);