PUBLISHED
2026-04-10 11:16
MODIFIED
2026-04-10 11:16
EPSS (Prob. Exploit)
0.91%
Top 39.8%
> DESCRIPTION
Denial of Service via Out of Memory vulnerability in Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ.
ActiveMQ NIO SSL transports do not correctly handle TLSv1.3 handshake KeyUpdates triggered by clients. This makes it possible for a client to rapidly trigger updates which causes the broker to exhaust all its memory in the SSL engine leading to DoS.
Note: TLS versions before TLSv1.3 (such as TLSv1.2) are broken but are not vulnerable to OOM. Previous TLS versions require a full handshake renegotiation which causes a connection to hang but not OOM. This is fixed as well.
This issue affects Apache ActiveMQ Client: before 5.19.4, from 6.0.0 before 6.2.4; Apache ActiveMQ Broker: before 5.19.4, from 6.0.0 before 6.2.4; Apache ActiveMQ: before 5.19.4, from 6.0.0 before 6.2.4.
Users are recommended to upgrade to version 6.2.4 or 5.19.5, which fixes the issue.
> AFFECTED_PRODUCTS
ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.
> RED HAT SEVERITY ASSESSMENT
THREAT SEVERITY
Important
> GITHUB SECURITY ADVISORY
GHSA-5568-6qcg-g7fx
HIGH
Apache ActiveMQ: Denial of Service via Out of Memory vulnerability
AFFECTED PACKAGES:
MAVEN / org.apache.activemq:apache-activemq
>= 6.0.0, < 6.2.4
Fixed in: 6.2.4
MAVEN / org.apache.activemq:apache-activemq
< 5.19.4
Fixed in: 5.19.4
MAVEN / org.apache.activemq:activemq-all
>= 6.0.0, < 6.2.4
Fixed in: 6.2.4
MAVEN / org.apache.activemq:activemq-all
< 5.19.4
Fixed in: 5.19.4
MAVEN / org.apache.activemq:activemq-broker
>= 6.0.0, < 6.2.4
Fixed in: 6.2.4
MAVEN / org.apache.activemq:activemq-broker
< 5.19.4
Fixed in: 5.19.4
MAVEN / org.apache.activemq:activemq-client
>= 6.0.0, < 6.2.4
Fixed in: 6.2.4
MAVEN / org.apache.activemq:activemq-client
< 5.19.4
Fixed in: 5.19.4
> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)
Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Incorrect handling of TLSv1.3 KeyUpdate can be exploited to cause DoS via OOM
AFFECTED PACKAGES:
Unknown / Unknown
24 versions affected
ALIASES:
BIT-activemq-2026-39304, GHSA-5568-6qcg-g7fx
> HISTORIQUE DES MODIFICATIONS
Première apparition
10/04/2026 11:16
Source: NVD
📊
ENRICHISSEMENT
12/04/2026 05:01
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
{
"severity_scale": null,
"threat_severity": "Important"
}
Nouvelle valeur:
{
"threat_severity": "Important",
"severity_scale": null
}
📊
ENRICHISSEMENT
11/04/2026 23:30
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
{
"severity_scale": null,
"threat_severity": "Important"
}
Nouvelle valeur:
{
"threat_severity": "Important",
"severity_scale": null
}
📊
ENRICHISSEMENT
11/04/2026 22:30
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
{
"severity_scale": null,
"threat_severity": "Important"
}
Nouvelle valeur:
{
"threat_severity": "Important",
"severity_scale": null
}
📊
ENRICHISSEMENT
11/04/2026 21:30
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
{
"severity_scale": null,
"threat_severity": "Important"
}
Nouvelle valeur:
{
"threat_severity": "Important",
"severity_scale": null
}
📊
ENRICHISSEMENT
11/04/2026 20:30
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
{
"severity_scale": null,
"threat_severity": "Important"
}
Nouvelle valeur:
{
"threat_severity": "Important",
"severity_scale": null
}
📊
ENRICHISSEMENT
11/04/2026 19:30
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
{
"severity_scale": null,
"threat_severity": "Important"
}
Nouvelle valeur:
{
"threat_severity": "Important",
"severity_scale": null
}
📊
ENRICHISSEMENT
11/04/2026 18:30
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
{
"severity_scale": null,
"threat_severity": "Important"
}
Nouvelle valeur:
{
"threat_severity": "Important",
"severity_scale": null
}
📊
ENRICHISSEMENT
11/04/2026 17:30
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
{
"severity_scale": null,
"threat_severity": "Important"
}
Nouvelle valeur:
{
"threat_severity": "Important",
"severity_scale": null
}
📊
ENRICHISSEMENT
11/04/2026 16:30
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
{
"severity_scale": null,
"threat_severity": "Important"
}
Nouvelle valeur:
{
"threat_severity": "Important",
"severity_scale": null
}
📊
ENRICHISSEMENT
11/04/2026 15:30
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
{
"severity_scale": null,
"threat_severity": "Important"
}
Nouvelle valeur:
{
"threat_severity": "Important",
"severity_scale": null
}
📊
ENRICHISSEMENT
11/04/2026 14:30
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
{
"severity_scale": null,
"threat_severity": "Important"
}
Nouvelle valeur:
{
"threat_severity": "Important",
"severity_scale": null
}
📊
ENRICHISSEMENT
11/04/2026 13:30
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
{
"severity_scale": null,
"threat_severity": "Important"
}
Nouvelle valeur:
{
"threat_severity": "Important",
"severity_scale": null
}
📊
ENRICHISSEMENT
11/04/2026 12:30
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
{
"severity_scale": null,
"threat_severity": "Important"
}
Nouvelle valeur:
{
"threat_severity": "Important",
"severity_scale": null
}
📊
ENRICHISSEMENT
11/04/2026 11:30
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
{
"severity_scale": null,
"threat_severity": "Important"
}
Nouvelle valeur:
{
"threat_severity": "Important",
"severity_scale": null
}
📊
ENRICHISSEMENT
11/04/2026 10:30
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
{
"severity_scale": null,
"threat_severity": "Important"
}
Nouvelle valeur:
{
"threat_severity": "Important",
"severity_scale": null
}
📊
ENRICHISSEMENT
11/04/2026 09:30
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
{
"severity_scale": null,
"threat_severity": "Important"
}
Nouvelle valeur:
{
"threat_severity": "Important",
"severity_scale": null
}
📊
ENRICHISSEMENT
11/04/2026 08:30
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
{
"severity_scale": null,
"threat_severity": "Important"
}
Nouvelle valeur:
{
"threat_severity": "Important",
"severity_scale": null
}
📊
ENRICHISSEMENT
11/04/2026 07:30
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
{
"severity_scale": null,
"threat_severity": "Important"
}
Nouvelle valeur:
{
"threat_severity": "Important",
"severity_scale": null
}
📊
ENRICHISSEMENT
11/04/2026 06:30
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
{
"severity_scale": null,
"threat_severity": "Important"
}
Nouvelle valeur:
{
"threat_severity": "Important",
"severity_scale": null
}
📊
ENRICHISSEMENT
11/04/2026 05:30
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
{
"severity_scale": null,
"threat_severity": "Important"
}
Nouvelle valeur:
{
"threat_severity": "Important",
"severity_scale": null
}
📊
ENRICHISSEMENT
11/04/2026 04:30
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
{
"severity_scale": null,
"threat_severity": "Important"
}
Nouvelle valeur:
{
"threat_severity": "Important",
"severity_scale": null
}
📊
ENRICHISSEMENT
11/04/2026 03:30
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
{
"severity_scale": null,
"threat_severity": "Important"
}
Nouvelle valeur:
{
"threat_severity": "Important",
"severity_scale": null
}
📊
ENRICHISSEMENT
11/04/2026 02:30
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
{
"severity_scale": null,
"threat_severity": "Important"
}
Nouvelle valeur:
{
"threat_severity": "Important",
"severity_scale": null
}
📊
ENRICHISSEMENT
11/04/2026 01:30
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
{
"severity_scale": null,
"threat_severity": "Important"
}
Nouvelle valeur:
{
"threat_severity": "Important",
"severity_scale": null
}
📊
ENRICHISSEMENT
11/04/2026 00:30
REDHAT
Champ modifié: Sévérité Red Hat
Nouvelle valeur:
{
"threat_severity": "Important",
"severity_scale": null
}
📊
ENRICHISSEMENT
11/04/2026 00:30
REDHAT
Total des modifications: 26
Dernière mise à jour: 6 months ago