Описание
It was found that when Artemis and HornetQ before 2.4.0 are configured with UDP discovery and JGroups discovery a huge byte array is created when receiving an unexpected multicast message. This may result in a heap memory exhaustion, full GC, or OutOfMemoryError.
It was found that when Artemis and HornetQ are configured with UDP discovery and JGroups discovery a huge byte array is created when receiving an unexpected multicast message. This may result in a heap memory exhaustion, full GC, or OutOfMemoryError.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat JBoss Operations Network 3 | hornetq | Not affected | ||
| Red Hat JBoss EAP 7 | apache-artemis | Fixed | RHSA-2018:0478 | 12.03.2018 |
| Red Hat JBoss Enterprise Application Platform 6.4 | hornetq | Fixed | RHSA-2018:0269 | 05.02.2018 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 | hornetq | Fixed | RHSA-2018:0271 | 05.02.2018 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 | infinispan | Fixed | RHSA-2018:0271 | 05.02.2018 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 | ironjacamar-eap6 | Fixed | RHSA-2018:0271 | 05.02.2018 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 | jboss-as-appclient | Fixed | RHSA-2018:0271 | 05.02.2018 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 | jbossas-appclient | Fixed | RHSA-2018:0271 | 05.02.2018 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 | jbossas-bundles | Fixed | RHSA-2018:0271 | 05.02.2018 |
| Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 | jboss-as-cli | Fixed | RHSA-2018:0271 | 05.02.2018 |
Показывать по
Дополнительная информация
Статус:
EPSS
7.5 High
CVSS3
Связанные уязвимости
It was found that when Artemis and HornetQ before 2.4.0 are configured with UDP discovery and JGroups discovery a huge byte array is created when receiving an unexpected multicast message. This may result in a heap memory exhaustion, full GC, or OutOfMemoryError.
Uncontrolled Resource Consumption in Artemis and HornetQ
EPSS
7.5 High
CVSS3