CVE-2022-23913

Опубликовано: 04 фев. 2022

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

In Apache ActiveMQ Artemis prior to 2.20.0 or 2.19.1, an attacker could partially disrupt availability (DoS) through uncontrolled resource consumption of memory.

Ссылки

https://lists.apache.org/thread/fjynj57rd99s814rdn5hzvmx8lz403q2
Exploit
Issue Tracking
Mailing List
Third Party Advisory
https://security.netapp.com/advisory/ntap-20220303-0003/
Third Party Advisory
https://lists.apache.org/thread/fjynj57rd99s814rdn5hzvmx8lz403q2
Exploit
Issue Tracking
Mailing List
Third Party Advisory
https://security.netapp.com/advisory/ntap-20220303-0003/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:apache:activemq_artemis:*:*:*:*:*:*:*:*

Версия до 2.19.1 (исключая)

Конфигурация 2

Одно из

cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*

cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*

EPSS

Процентиль: 85%

0.02409

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-770

Связанные уязвимости

CVE-2022-23913

CVSS3: 7.5

redhat

около 4 лет назад

In Apache ActiveMQ Artemis prior to 2.20.0 or 2.19.1, an attacker could partially disrupt availability (DoS) through uncontrolled resource consumption of memory.

GHSA-pr38-qpxm-g88x

CVSS3: 7.5

github

около 4 лет назад

Apache ActiveMQ Artemis Uncontrolled Resource Consumption (DoS)

EPSS

Процентиль: 85%

0.02409

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-770