oss-sec mailing list archives

[ANNOUNCE] CVE-2015-7559 - DoS in client via shutdown command


From: Dejan Bosanac <dejan () nighttale net>
Date: Tue, 25 Apr 2017 10:47:45 +0200

There following security vulnerability was reported against Apache
ActiveMQ 5.14.4 and older versions.

Please check the following document and see if you’re affected by the issue.

http://activemq.apache.org/security-advisories.data/CVE-2015-7559-announcement.txt?version=1&modificationDate=1493024710000&api=v2

Apache ActiveMQ 5.14.5 with appropriate fixes was released and
are available for upgrade.


Regards
--
Dejan Bosanac
http://sensatic.net/about

Current thread: