CVE-2017-12174CWE-400

CVE-2017-12174: vulnerability in Red Hat, Inc. HornetQ/Artemis

Published · Updated

Follow this CVE+ Monitor HornetQ/Artemis+ Monitor org.apache.activemq:artemis-native

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 6.0%
It was found that when Artemis and HornetQ before 2.4.0 are configured with UDP discovery and JGroups discovery a huge byte array is created when receiving an unexpected multicast message. This may result in a heap memory exhaustion, full GC, or OutOfMemoryError.
Affected products
Red Hat, Inc. · HornetQ/Artemis