The processControlCommand function in broker/TransportConnection.java in Apache ActiveMQ before 5.11.0 allows remote attackers to cause a denial of service (shutdown) via a shutdown command.
{ "availability": "No subscription required", "ubuntu_priority": "high", "binaries": [ { "binary_version": "5.6.0+dfsg-1+deb7u1build0.14.04.1", "binary_name": "activemq" }, { "binary_version": "5.6.0+dfsg-1+deb7u1build0.14.04.1", "binary_name": "libactivemq-java" }, { "binary_version": "5.6.0+dfsg-1+deb7u1build0.14.04.1", "binary_name": "libactivemq-java-doc" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "high", "binaries": [ { "binary_version": "5.13.2+dfsg-2", "binary_name": "activemq" }, { "binary_version": "5.13.2+dfsg-2", "binary_name": "libactivemq-java" }, { "binary_version": "5.13.2+dfsg-2", "binary_name": "libactivemq-java-doc" } ] }