imPC@ndo IT

Tracker / CVE-2017-12174

CVE-2017-12174

High 7.5

It was found that when Artemis and HornetQ before 2.4.0 are configured with UDP discovery and JGroups discovery a huge byte array is created when receiving an unexpected multicast message. This may result in a heap memory exhaustion, full GC, or OutOfMemoryError.

Affected products and versions

apache artemis · … → 2.4.0
redhat hornetq · … → 2.4.0
redhat jboss_enterprise_application_platform

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References