[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <493030fa-0b5b-4665-8c10-e8da4813f9f9@zmail15.collab.prod.int.phx2.redhat.com>
Date: Sat, 24 Dec 2011 19:37:35 -0500 (EST)
From: David Jorm <djorm@...hat.com>
To: oss-security@...ts.openwall.com
Subject: CVE Request for Apache ActiveMQ DoS
A flaw in Apache ActiveMQ before 5.6.0 could allow a remote unauthenticated
attacker to abuse the 'failover' feature, allowing them to trigger a denial of
service against the broker service. An attacker can issue multiple ActiveMQ
openwire connection requests using the string 'failover:tcp://[IP]:61616', and
due to the 'failure' mechanism, all TCP connections remain active even if a
valid session is not created. After a few thousand requests, a
'java.net.SocketException: Too many open files' exception is triggered, leading
to a freeze or crash of the broker (and possibly connected systems as well).
Upstream bug:
https://issues.apache.org/jira/browse/AMQ-3294
Secunia advisory:
http://secunia.com/advisories/47112
Patch commits:
http://svn.apache.org/viewvc?view=revision&revision=1209700
http://svn.apache.org/viewvc?view=revision&revision=1211844
--
David Jorm / Red Hat Security Response Team
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
