https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 02:12:32 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-06024 bdu:2025-06024 https://cve.radiocsirt.org/vuln/bdu:2025-06024 https://cve.radiocsirt.org/vuln/bit-activemq-2025-27533 <p><strong>Affected:</strong> Bitnami: activemq</p> <p>Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ.</p> <p>During unmarshalling of OpenWire commands the size value of buffers was not properly validated which could lead to excessive memory allocation and be exploited to cause a denial of service (DoS) by depleting process memory, thereby affecting applications and services that rely on the availability of the ActiveMQ broker when not using mutual TLS connections. This issue affects Apache ActiveMQ: from 6.0.0 before 6.1.6, from 5.18.0 before 5.18.7, from 5.17.0 before 5.17.7, before 5.16.8. ActiveMQ 5.19.0 is not affected.</p> <p>Users are recommended to upgrade to version 6.1.6+, 5.19.0+, 5.18.7+, 5.17.7, or 5.16.8 or which fixes the issue.</p> <p>Existing users may implement mutual TLS to mitigate the risk on affected brokers.</p> <p><strong>Affected:</strong> Bitnami: activemq</p> <p>Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ.</p> <p>During unmarshalling of OpenWire commands the size value of buffers was not properly validated which could lead to excessive memory allocation and be exploited to cause a denial of service (DoS) by depleting process memory, thereby affecting applications and services that rely on the availability of the ActiveMQ broker when not using mutual TLS connections. This issue affects Apache ActiveMQ: from 6.0.0 before 6.1.6, from 5.18.0 before 5.18.7, from 5.17.0 before 5.17.7, before 5.16.8. ActiveMQ 5.19.0 is not affected.</p> <p>Users are recommended to upgrade to version 6.1.6+, 5.19.0+, 5.18.7+, 5.17.7, or 5.16.8 or which fixes the issue.</p> <p>Existing users may implement mutual TLS to mitigate the risk on affected brokers.</p> https://cve.radiocsirt.org/vuln/bit-activemq-2025-27533 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0746 certfr-2025-avi-0746 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0746 https://cve.radiocsirt.org/vuln/euvd-2026-257828 EUVD-2026-257828 https://cve.radiocsirt.org/vuln/euvd-2026-257828 https://cve.radiocsirt.org/vuln/fkie_cve-2025-27533 <p>Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ.</p> <p>During unmarshalling of OpenWire commands the size value of buffers was not properly validated which could lead to excessive memory allocation and be exploited to cause a denial of service (DoS) by depleting process memory, thereby affecting applications and services that rely on the availability of the ActiveMQ broker when not using mutual TLS connections. This issue affects Apache ActiveMQ: from 6.0.0 before 6.1.6, from 5.18.0 before 5.18.7, from 5.17.0 before 5.17.7, before 5.16.8. ActiveMQ 5.19.0 is not affected.</p> <p>Users are recommended to upgrade to version 6.1.6+, 5.19.0+, 5.18.7+, 5.17.7, or 5.16.8 or which fixes the issue.</p> <p>Existing users may implement mutual TLS to mitigate the risk on affected brokers.</p> <p>Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ.</p> <p>During unmarshalling of OpenWire commands the size value of buffers was not properly validated which could lead to excessive memory allocation and be exploited to cause a denial of service (DoS) by depleting process memory, thereby affecting applications and services that rely on the availability of the ActiveMQ broker when not using mutual TLS connections. This issue affects Apache ActiveMQ: from 6.0.0 before 6.1.6, from 5.18.0 before 5.18.7, from 5.17.0 before 5.17.7, before 5.16.8. ActiveMQ 5.19.0 is not affected.</p> <p>Users are recommended to upgrade to version 6.1.6+, 5.19.0+, 5.18.7+, 5.17.7, or 5.16.8 or which fixes the issue.</p> <p>Existing users may implement mutual TLS to mitigate the risk on affected brokers.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-27533 https://cve.radiocsirt.org/vuln/ghsa-whxr-3p84-rf3c <p><strong>Affected:</strong> Maven: org.apache.activemq:activemq-openwire-legacy, Maven: org.apache.activemq:activemq-client</p> <p>Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ.</p> <p>During unmarshalling of OpenWire commands the size value of buffers was not properly validated which could lead to excessive memory allocation and be exploited to cause a denial of service (DoS) by depleting process memory, thereby affecting applications and services that rely on the availability of the ActiveMQ broker when not using mutual TLS connections. This issue affects Apache ActiveMQ: from 6.0.0 before 6.1.6, from 5.18.0 before 5.18.7, from 5.17.0 before 5.17.7, before 5.16.8. ActiveMQ 5.19.0 is not affected.</p> <p>Users are recommended to upgrade to version 6.1.6+, 5.19.0+, 5.18.7+, 5.17.7, or 5.16.8 or which fixes the issue.</p> <p>Existing users may implement mutual TLS to mitigate the risk on affected brokers.</p> <p><strong>Affected:</strong> Maven: org.apache.activemq:activemq-openwire-legacy, Maven: org.apache.activemq:activemq-client</p> <p>Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ.</p> <p>During unmarshalling of OpenWire commands the size value of buffers was not properly validated which could lead to excessive memory allocation and be exploited to cause a denial of service (DoS) by depleting process memory, thereby affecting applications and services that rely on the availability of the ActiveMQ broker when not using mutual TLS connections. This issue affects Apache ActiveMQ: from 6.0.0 before 6.1.6, from 5.18.0 before 5.18.7, from 5.17.0 before 5.17.7, before 5.16.8. ActiveMQ 5.19.0 is not affected.</p> <p>Users are recommended to upgrade to version 6.1.6+, 5.19.0+, 5.18.7+, 5.17.7, or 5.16.8 or which fixes the issue.</p> <p>Existing users may implement mutual TLS to mitigate the risk on affected brokers.</p> https://cve.radiocsirt.org/vuln/ghsa-whxr-3p84-rf3c https://cve.radiocsirt.org/vuln/ncsc-2026-0022 NCSC-2026-0022 https://cve.radiocsirt.org/vuln/ncsc-2026-0022 https://cve.radiocsirt.org/vuln/oesa-2025-1507 <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: activemq, openEuler:24.03-LTS: activemq, openEuler:24.03-LTS-SP1: activemq, openEuler:20.03-LTS-SP4: activemq, openEuler:22.03-LTS-SP3: activemq</p> <p>The most popular and powerful open source messaging and Integration Patterns server. Security Fix(es):</p> <p>Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ.</p> <p>During unmarshalling of OpenWire commands the size value of buffers was not properly validated which could lead to excessive memory allocation and be exploited to cause a denial of service (DoS) by depleting process memory, thereby affecting applications and services that rely on the availability of the ActiveMQ broker when not using mutual TLS connections. This issue affects Apache ActiveMQ: from 6.0.0 before 6.1.6, from 5.18.0 before 5.18.7, from 5.17.0 before 5.17.7, before 5.16.8. ActiveMQ 5.19.0 is not affected.</p> <p>Users are recommended to upgrade to version 6.1.6+, 5.19.0+, 5.18.7+, 5.17.7, or 5.16.8 or which fixes the issue.</p> <p>Existing users may implement mutual TLS to mitigate the risk on affected brokers.(CVE-2025-27533)</p> <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: activemq, openEuler:24.03-LTS: activemq, openEuler:24.03-LTS-SP1: activemq, openEuler:20.03-LTS-SP4: activemq, openEuler:22.03-LTS-SP3: activemq</p> <p>The most popular and powerful open source messaging and Integration Patterns server. Security Fix(es):</p> <p>Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ.</p> <p>During unmarshalling of OpenWire commands the size value of buffers was not properly validated which could lead to excessive memory allocation and be exploited to cause a denial of service (DoS) by depleting process memory, thereby affecting applications and services that rely on the availability of the ActiveMQ broker when not using mutual TLS connections. This issue affects Apache ActiveMQ: from 6.0.0 before 6.1.6, from 5.18.0 before 5.18.7, from 5.17.0 before 5.17.7, before 5.16.8. ActiveMQ 5.19.0 is not affected.</p> <p>Users are recommended to upgrade to version 6.1.6+, 5.19.0+, 5.18.7+, 5.17.7, or 5.16.8 or which fixes the issue.</p> <p>Existing users may implement mutual TLS to mitigate the risk on affected brokers.(CVE-2025-27533)</p> https://cve.radiocsirt.org/vuln/oesa-2025-1507 https://cve.radiocsirt.org/vuln/rhsa-2025:17567 <p>jetty: HTTP/2 (including DNS over HTTPS) contains a design flaw and is vulnerable to &#34;MadeYouReset&#34; DoS attack through HTTP/2 control frames ActiveMQ: ActiveMQ: Unvalidated Buffer Size Allocation netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions</p> <p>jetty: HTTP/2 (including DNS over HTTPS) contains a design flaw and is vulnerable to &#34;MadeYouReset&#34; DoS attack through HTTP/2 control frames ActiveMQ: ActiveMQ: Unvalidated Buffer Size Allocation netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions</p> https://cve.radiocsirt.org/vuln/rhsa-2025:17567 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-27533 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: activemq, Ubuntu:Pro:18.04:LTS: activemq, Ubuntu:Pro:20.04:LTS: activemq, Ubuntu:Pro:22.04:LTS: activemq, Ubuntu:24.04:LTS: activemq, Ubuntu:25.10: activemq, Ubuntu:26.04:LTS: activemq</p> <p>Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ. During unmarshalling of OpenWire commands the size value of buffers was not properly validated which could lead to excessive memory allocation and be exploited to cause a denial of service (DoS) by depleting process memory, thereby affecting applications and services that rely on the availability of the ActiveMQ broker when not using mutual TLS connections. This issue affects Apache ActiveMQ: from 6.0.0 before 6.1.6, from 5.18.0 before 5.18.7, from 5.17.0 before 5.17.7, before 5.16.8. ActiveMQ 5.19.0 is not affected. Users are recommended to upgrade to version 6.1.6+, 5.19.0+, 5.18.7+, 5.17.7, or 5.16.8 or which fixes the issue. Existing users may implement mutual TLS to mitigate the risk on affected brokers.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: activemq, Ubuntu:Pro:18.04:LTS: activemq, Ubuntu:Pro:20.04:LTS: activemq, Ubuntu:Pro:22.04:LTS: activemq, Ubuntu:24.04:LTS: activemq, Ubuntu:25.10: activemq, Ubuntu:26.04:LTS: activemq</p> <p>Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ. During unmarshalling of OpenWire commands the size value of buffers was not properly validated which could lead to excessive memory allocation and be exploited to cause a denial of service (DoS) by depleting process memory, thereby affecting applications and services that rely on the availability of the ActiveMQ broker when not using mutual TLS connections. This issue affects Apache ActiveMQ: from 6.0.0 before 6.1.6, from 5.18.0 before 5.18.7, from 5.17.0 before 5.17.7, before 5.16.8. ActiveMQ 5.19.0 is not affected. Users are recommended to upgrade to version 6.1.6+, 5.19.0+, 5.18.7+, 5.17.7, or 5.16.8 or which fixes the issue. Existing users may implement mutual TLS to mitigate the risk on affected brokers.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-27533 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0954 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache ActiveMQ ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache ActiveMQ ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0954