CVE-2021-4040: Out-of-bounds Write
(updated )
A flaw was found in AMQ Broker. This issue can cause a partial interruption to the availability of AMQ Broker via an Out of memory (OOM) condition. This flaw allows an attacker to partially disrupt availability to the broker through a sustained attack of maliciously crafted messages. The highest threat from this vulnerability is system availability.
References
- access.redhat.com/security/cve/CVE-2021-4040
- bugzilla.redhat.com/show_bug.cgi?id=2028254
- github.com/advisories/GHSA-gf8c-j759-86mg
- github.com/apache/activemq-artemis/pull/3862
- github.com/apache/activemq-artemis/pull/3871
- github.com/apache/activemq-artemis/pull/3871/commits
- github.com/apache/activemq-artemis/pull/3871/commits/153d2e9a979aead8dff95fbc91d659ecc7d0fb82
- issues.apache.org/jira/browse/ARTEMIS-3593
- nvd.nist.gov/vuln/detail/CVE-2021-4040
Code Behaviors & Features
Detect and mitigate CVE-2021-4040 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →