CVE-2017-12174 (activemq_artemis, hornetq, jboss_enterprise_application_platform)

It was found that when Artemis and HornetQ before 2.4.0 are configured with UDP discovery and JGroups discovery a huge byte array is created when receiving an unexpected multicast message. This may result in a heap memory exhaustion, full GC, or OutOfMemoryError.

View Full Alert

Leave a Reply