Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Sat, 24 Dec 2011 19:37:35 -0500 (EST)
From: David Jorm <djorm@...hat.com>
To: oss-security@...ts.openwall.com
Subject: CVE Request for Apache ActiveMQ DoS

A flaw in Apache ActiveMQ before 5.6.0 could allow a remote unauthenticated
attacker to abuse the 'failover' feature, allowing them to trigger a denial of
service against the broker service.  An attacker can issue multiple ActiveMQ
openwire connection requests using the string 'failover:tcp://[IP]:61616', and
due to the 'failure' mechanism, all TCP connections remain active even if a
valid session is not created.  After a few thousand requests, a
'java.net.SocketException: Too many open files' exception is triggered, leading
to a freeze or crash of the broker (and possibly connected systems as well).

Upstream bug:
https://issues.apache.org/jira/browse/AMQ-3294

Secunia advisory:
http://secunia.com/advisories/47112

Patch commits:
http://svn.apache.org/viewvc?view=revision&revision=1209700
http://svn.apache.org/viewvc?view=revision&revision=1211844

-- 
David Jorm / Red Hat Security Response Team

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.