[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <4EF775BC.2010201@redhat.com>
Date: Sun, 25 Dec 2011 12:13:00 -0700
From: Kurt Seifried <kseifried@...hat.com>
To: oss-security@...ts.openwall.com
CC: David Jorm <djorm@...hat.com>
Subject: Re: CVE Request for Apache ActiveMQ DoS
On 12/24/2011 05:37 PM, David Jorm wrote:
> A flaw in Apache ActiveMQ before 5.6.0 could allow a remote unauthenticated
> attacker to abuse the 'failover' feature, allowing them to trigger a denial of
> service against the broker service. An attacker can issue multiple ActiveMQ
> openwire connection requests using the string 'failover:tcp://[IP]:61616', and
> due to the 'failure' mechanism, all TCP connections remain active even if a
> valid session is not created. After a few thousand requests, a
> 'java.net.SocketException: Too many open files' exception is triggered, leading
> to a freeze or crash of the broker (and possibly connected systems as well).
>
> Upstream bug:
> https://issues.apache.org/jira/browse/AMQ-3294
>
> Secunia advisory:
> http://secunia.com/advisories/47112
>
> Patch commits:
> http://svn.apache.org/viewvc?view=revision&revision=1209700
> http://svn.apache.org/viewvc?view=revision&revision=1211844
>
Please use CVE-2011-4905 for this issue.
--
-Kurt Seifried / Red Hat Security Response Team
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
