Описание
The processControlCommand function in broker/TransportConnection.java in Apache ActiveMQ before 5.11.0 allows remote attackers to cause a denial of service (shutdown) via a shutdown command.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 5.13.2+dfsg-2 |
| esm-apps-legacy/xenial | not-affected | 5.13.2+dfsg-2 |
| esm-apps/xenial | not-affected | 5.13.2+dfsg-2 |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was released [5.6.0+dfsg-1+deb7u1build0.14.04.1]] |
| precise | ignored | end of life |
| precise/esm | DNE | precise was needed |
| trusty | released | 5.6.0+dfsg-1+deb7u1build0.14.04.1 |
| trusty/esm | DNE | trusty was released [5.6.0+dfsg-1+deb7u1build0.14.04.1] |
| upstream | released | 5.11.0 |
| utopic | ignored | end of life |
Показывать по
10
Ссылки на источники
5 Medium
CVSS2
7.5 High
CVSS3
Связанные уязвимости
CVSS3: 7.5
nvd
около 11 лет назад
The processControlCommand function in broker/TransportConnection.java in Apache ActiveMQ before 5.11.0 allows remote attackers to cause a denial of service (shutdown) via a shutdown command.
CVSS3: 7.5
debian
около 11 лет назад
The processControlCommand function in broker/TransportConnection.java ...
CVSS3: 7.5
github
больше 4 лет назад
Improper Neutralization of Special Elements used in an OS Command in Apache ActiveMQ
5 Medium
CVSS2
7.5 High
CVSS3