CVE-2021-4040

2022-08-2415:13:07

CWE-400

redhat

www.cve.org

amq broker

oom condition

availability disruption

vulnerability

sustained attack

maliciously crafted messages

system availability

EPSS

0.003

Percentile

68.6%

JSON

A flaw was found in AMQ Broker. This issue can cause a partial interruption to the availability of AMQ Broker via an Out of memory (OOM) condition. This flaw allows an attacker to partially disrupt availability to the broker through a sustained attack of maliciously crafted messages. The highest threat from this vulnerability is system availability.

CNA Affected

[
  {
    "product": "AMQ Broker",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Fixed in v2.19.1, v2.20.0"
      }
    ]
  }
]