Missing Authentication for Critical Function

Overview org.apache.activemq:artemis-server is a server package for the ActiveMQ-Artemis project. Affected versions of this package are vulnerable to Missing Authentication for Critical Function in the handlePacket process of CoreProtocolManager.LocalChannelHandler when processing topology...

PT-2026-90735

Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...

PT-2026-90737

Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...

PT-2026-90743

Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...

PT-2026-90762

Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...

PT-2026-90734

Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...

PT-2026-90741

Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...

PT-2026-90749

Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...

PT-2026-90756

Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...

PT-2021-24321

Name of the Vulnerable Software and Affected Versions: wolfSSL wolfMQTT version 1.9 Description: The issue is a heap-based buffer overflow of 4 bytes in the MqttDecode Publish function, which is called from MqttClient DecodePacket and MqttClient HandlePacket. Recommendations: For wolfSSL wolfMQTT...

PT-2021-24322

Name of the Vulnerable Software and Affected Versions: wolfSSL wolfMQTT version 1.9 Description: The issue is a heap-based buffer overflow of 8 bytes in the MqttDecode Publish function, which is called from MqttClient DecodePacket and MqttClient HandlePacket. Recommendations: For wolfSSL wolfMQTT...

PT-2021-24323

Name of the Vulnerable Software and Affected Versions: wolfSSL wolfMQTT version 1.9 Description: The issue is a heap-based buffer overflow in the MqttClient DecodePacket function, which is called from MqttClient HandlePacket and MqttClient WaitType. Recommendations: For wolfSSL wolfMQTT version...

PT-2021-27748

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow WRITE 1 crash has been reported. The crash involves the MqttClient DecodePacket, MqttClient HandlePacket, and MqttClient WaitType...

PT-2021-27735

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow write error. Technical details about the crash include the MqttDecode Publish, MqttClient DecodePacket, an...