CVE-2011-4905

Apache ActiveMQ before 5.6.0 allows remote attackers to cause a denial of service (file-descriptor exhaustion and broker crash or hang) by sending many openwire failover:tcp:// connection requests.

Published: Jan 5, 2012
Updated: May 9, 2024
CVE: CVE-2011-4905
GHSA: GHSA-9wcx-326r-7j7w
Severity: Medium
Exploit:

CVSS v2:

Severity: Medium
Score: 5
AV:N/AC:L/Au:N/C:N/I:N/A:P

CWEs:

CWE-399

Affected Software
References

Software	From	Fixed in
apache / activemq	5.3.0	5.3.0.x
apache / activemq	4.1.0	4.1.0.x
apache / activemq	1.2	1.2.x
apache / activemq	5.4.3	5.4.3.x
apache / activemq	5.4.0	5.4.0.x
apache / activemq	1.5	1.5.x
apache / activemq	3.2.1	3.2.1.x
apache / activemq	4.1.2	4.1.2.x
apache / activemq	5.4.1	5.4.1.x
apache / activemq	1.3	1.3.x
apache / activemq	-	5.5.1.x
apache / activemq	5.3.1	5.3.1.x
apache / activemq	3.2	3.2.x
apache / activemq	2.1	2.1.x
apache / activemq	5.2.0	5.2.0.x
apache / activemq	3.1	3.1.x
apache / activemq	1.4	1.4.x
apache / activemq	1.1	1.1.x
apache / activemq	5.0.0	5.0.0.x
apache / activemq	4.0	4.0.x
apache / activemq	4.0.2	4.0.2.x
apache / activemq	4.0.1	4.0.1.x
apache / activemq	3.2.2	3.2.2.x
apache / activemq	3.0	3.0.x
apache / activemq	5.1.0	5.1.0.x
apache / activemq	5.5.0	5.5.0.x
apache / activemq	4.0-rc2	4.0-rc2.x
apache / activemq	5.3.2	5.3.2.x
apache / activemq	4.1.1	4.1.1.x
apache / activemq	4.0-m4	4.0-m4.x
apache / activemq	2.0	2.0.x
apache / activemq	5.4.2	5.4.2.x
org.apache.activemq / activemq-core	-	5.6.0

Vulnerability Database

289,689

CVE-2011-4905