Threats tagged 'ghsa-xjwq-9jw5-jf7w'

Apache ActiveMQ versions before 5.19.8 and from 6.0.0 before 6.2.7 contain an improper input validation vulnerability in the STOMP connector. A remote unauthenticated attacker can exploit this by sending a negative content-length, causing denial-of-service conditions. The attack can lead to out-of-memory conditions or abnormal connection closures depending on the STOMP transport type. Upgrading to versions 5.19.8 or 6.2.7 resolves this issue.