CVE-2017-12174
07.03.2018, 22:29
It was found that when Artemis and HornetQ before 2.4.0 are configured with UDP discovery and JGroups discovery a huge byte array is created when receiving an unexpected multicast message. This may result in a heap memory exhaustion, full GC, or OutOfMemoryError.Enginsight
| Vendor | Product | Version |
|---|---|---|
| apache | activemq_artemis | 𝑥 < 2.4.0 |
| redhat | hornetq | 𝑥 < 2.4.0 |
| redhat | jboss_enterprise_application_platform | 6.4.0 |
| redhat | jboss_enterprise_application_platform | 7.1.0 |
| redhat | jboss_enterprise_application_platform | 7.1.0 |
| redhat | jboss_enterprise_application_platform | 6.0.0 |
| redhat | jboss_enterprise_application_platform | 6.4.0 |
𝑥
= Vulnerable software versions
References