Описание
The processControlCommand function in broker/TransportConnection.java in Apache ActiveMQ before 5.11.0 allows remote attackers to cause a denial of service (shutdown) via a shutdown command.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| activemq | fixed | 5.6.0+dfsg1-4+deb8u1 | package |
Связанные уязвимости
CVSS3: 7.5
ubuntu
около 11 лет назад
The processControlCommand function in broker/TransportConnection.java in Apache ActiveMQ before 5.11.0 allows remote attackers to cause a denial of service (shutdown) via a shutdown command.
CVSS3: 7.5
nvd
около 11 лет назад
The processControlCommand function in broker/TransportConnection.java in Apache ActiveMQ before 5.11.0 allows remote attackers to cause a denial of service (shutdown) via a shutdown command.
CVSS3: 7.5
github
больше 4 лет назад
Improper Neutralization of Special Elements used in an OS Command in Apache ActiveMQ