CVE-2014-3576
Fixed in a distro release EPSS 13%
The processControlCommand function in broker/TransportConnection.java in Apache ActiveMQ before 5.11.0 allows remote attackers to cause a denial of service (shutdown) via a shutdown command.
Products: apache activemq, oracle business_intelligence_publisher, oracle fusion_middleware
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Maven | org.apache.activemq:activemq-client | 5.11.0 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | activemq | 5.6.0+dfsg1-4+deb8u1 |
| Debian 13 | activemq | 5.6.0+dfsg1-4+deb8u1 |
| Debian 7 | activemq | 5.6.0+dfsg-1+deb7u1 |
| Debian 8 | activemq | 5.6.0+dfsg1-4+deb8u1 |
| Ubuntu 14.04 LTS | activemq | 5.6.0+dfsg-1+deb7u1build0.14.04.1 |