CVE-2021-4040

Katalog CVE

CVSS 5.3 · Medium EPSS 3,1%

Kerentanan Uncontrolled Resource Consumption pada redhat amq broker, apache artemis. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

A flaw was found in AMQ Broker. This issue can cause a partial interruption to the availability of AMQ Broker via an Out of memory (OOM) condition. This flaw allows an attacker to partially disrupt availability to the broker through a sustained attack of maliciously crafted messages. The highest threat from this vulnerability is system availability.

Rincian

Terbit di NVD

24 Agustus 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-400: Uncontrolled Resource Consumption
CWE-787: Out-of-bounds Write

EPSS (30 hari)

3,1% peluang dieksploitasi; lebih tinggi dari 87,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://access.redhat.com/security/cve/CVE-2021-4040 advisory vendor
• https://bugzilla.redhat.com/show_bug.cgi?id=2028254 issue tracking · advisory vendor
• https://github.com/apache/activemq-artemis/pull/3871/commits patch · advisory pihak ketiga
• https://issues.apache.org/jira/browse/ARTEMIS-3593 patch · advisory pihak ketiga