oss-sec mailing list archives

[ANNOUNCE] CVE-2019-0222 - Apache ActiveMQ: Corrupt MQTT frame can cause broker shutdown

From: Dejan Bosanac <dejan () nighttale net>
Date: Wed, 27 Mar 2019 13:11:53 +0100

The following security vulnerability was reported against Apache
ActiveMQ 5.15.8 and older versions.

Please check the following document and see if you’re affected by the issue.

http://activemq.apache.org/security-advisories.data/CVE-2019-0222-announcement.txt

Apache ActiveMQ 5.15.9 has been released with appropriate fixes and is
available for upgrade.

Current thread:

[ANNOUNCE] CVE-2019-0222 - Apache ActiveMQ: Corrupt MQTT frame can cause broker shutdown Dejan Bosanac (Mar 27)