Описание
The processControlCommand function in broker/TransportConnection.java in Apache ActiveMQ before 5.11.0 allows remote attackers to cause a denial of service (shutdown) via a shutdown command.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 5.13.2+dfsg-2 |
| esm-apps/xenial | not-affected | 5.13.2+dfsg-2 |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was released [5.6.0+dfsg-1+deb7u1build0.14.04.1]] |
| precise | ignored | end of life |
| precise/esm | DNE | precise was needed |
| trusty | released | 5.6.0+dfsg-1+deb7u1build0.14.04.1 |
| trusty/esm | DNE | trusty was released [5.6.0+dfsg-1+deb7u1build0.14.04.1] |
| upstream | released | 5.11.0 |
| utopic | ignored | end of life |
| vivid | released | 5.6.0+dfsg1-4+deb8u1 |
Показывать по
Ссылки на источники
EPSS
5 Medium
CVSS2
7.5 High
CVSS3
Связанные уязвимости
The processControlCommand function in broker/TransportConnection.java in Apache ActiveMQ before 5.11.0 allows remote attackers to cause a denial of service (shutdown) via a shutdown command.
The processControlCommand function in broker/TransportConnection.java in Apache ActiveMQ before 5.11.0 allows remote attackers to cause a denial of service (shutdown) via a shutdown command.
The processControlCommand function in broker/TransportConnection.java ...
Improper Neutralization of Special Elements used in an OS Command in Apache ActiveMQ
EPSS
5 Medium
CVSS2
7.5 High
CVSS3