Description

It was found that when Artemis and HornetQ before 2.4.0 are configured with UDP discovery and JGroups discovery a huge byte array is created when receiving an unexpected multicast message. This may result in a heap memory exhaustion, full GC, or OutOfMemoryError.

Remediation

References

CVE-2017-12174

Related Vulnerabilities

Phusion Passenger Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2018-12615)

WordPress Plugin Woopra Analytics Arbitrary File Upload (1.4.3.1)

MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-3455)

WordPress Plugin UltimateWoo-The Ultimate WooCommerce with Unlimited Usage PHP Object Injection (0.1.10)

WordPress Plugin WP-Mon Arbitrary File Disclosure (0.5.1)

Severity

High

Classification

CVE-2017-12174 CWE-400 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities