Denial Of Service (DoS)

Red Hat Enterprise MRG (Messaging, Realtime and Grid) is vulnerable to Denial Of Service (DoS). Due to a flaw in the way SSL connections to the MRG Messaging broker were handled, a connection (from a user or client application) to the broker’s SSL port would prevent the broker from responding to any other connections on that port, until the first connection’s SSL handshake completed or failed. A remote user could use this flaw to block connections from legitimate clients. Note that this issue only affected connections to the SSL port. The broker does not listen for SSL connections by default.