Memory Allocation With Excessive Size Value

🗓️ 13 Aug 2026 07:55:31Reported by Veracode Vulnerability DatabaseType

Apache ActiveMQ OpenWire unmarshaling allows crafted messages with excessive size values to crash the broker via out-of-memory condition.

Reporter	Title	Published	Views	Family All 30
IBM Security Bulletins	Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in activemq-all-5.19.0.jar	7 Aug 202605:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Jazz for Service Management is affected by multiple vulnerabilities in Apache ActiveMQ	31 Jul 202612:07	–	ibm
Tenable Nessus	Apache ActiveMQ < 5.19.8 / 6.x < 6.2.7 Multiple Vulnerabilities	3 Jul 202600:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-53917	1 Jul 202600:00	–	nessus
ATTACKERKB	CVE-2026-53917	30 Jun 202609:49	–	attackerkb
Circl	CVE-2026-53917	29 Jun 202622:06	–	circl
CNVD	Apache ActiveMQ resource management error vulnerability (CNVD-2026-28243)	1 Jul 202600:00	–	cnvd
CVE	CVE-2026-53917	30 Jun 202609:49	–	cve
Cvelist	CVE-2026-53917 Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Client, Apache ActiveMQ Broker: Unbounded memory allocation in OpenWire property unmarshalling	30 Jun 202609:49	–	cvelist
Debian CVE	CVE-2026-53917	30 Jun 202609:49	–	debiancve

Vulners

Node

apache activemq-allRange6.0.0–6.2.6java

apache activemq-allRange4.1.2–5.19.7java

apache activemq-brokerRange6.0.0–6.2.6java

apache activemq-brokerRange5.0.0–5.19.7java

apache apache-activemqRange6.0.0–6.2.6java

apache apache-activemqRange4.1.1–5.19.7java

apache activemq-clientRange6.0.0–6.2.6java

apache activemq-clientRange5.0.0–5.19.7java

Source	Link
lists	www.lists.apache.org/thread/grrd1mwgkgblqjbwkkq6dvmdxd9ov2dx
github	www.github.com/apache/activemq/commit/ecfd1336fa3f3f6116a78f0ab71d1b2f90bc717f
openwall	www.openwall.com/lists/oss-security/2026/06/29/14
github	www.github.com/advisories/GHSA-f77w-px59-cqf5

13 Aug 2026 08:20Current

5.2Medium risk

Vulners AI Score5.2

CVSS 3.17.5

EPSS0.01177

SSVC