{"id":"CVE-2022-23913","state":"PUBLISHED","title":"Apache ActiveMQ Artemis DoS","description":"In Apache ActiveMQ Artemis prior to 2.20.0 or 2.19.1, an attacker could partially disrupt availability (DoS) through uncontrolled resource consumption of memory.","publishedAt":"2022-02-04T22:33:01.000Z","updatedAt":"2024-08-03T03:59:22.547Z","severity":null,"assigner":"apache","products":["Apache Software Foundation Apache ActiveMQ Artemis"],"affected":[{"vendor":"Apache Software Foundation","product":"Apache ActiveMQ Artemis","versions":[{"version":"2.19.0","status":"affected","lessThan":"2.20.0","changes":[{"at":"2.19.1","status":"unaffected"}],"versionType":"custom"}]}],"references":["https://lists.apache.org/thread/fjynj57rd99s814rdn5hzvmx8lz403q2","https://security.netapp.com/advisory/ntap-20220303-0003/"],"weaknesses":["CWE-770"],"ingestedAt":"2026-10-29T19:49:40.939Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/23xxx/CVE-2022-23913.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2022-23913","state":"PUBLISHED","datePublished":"2022-02-04T22:33:01.000Z","dateUpdated":"2024-08-03T03:59:22.547Z","assignerShortName":"apache","assignerOrgId":"f0158376-9dc2-43b6-827c-5f631a4d8d09","dateReserved":"2022-01-24T00:00:00.000Z"},"containers":{"cna":{"title":"Apache ActiveMQ Artemis DoS","descriptions":[{"lang":"en","value":"In Apache ActiveMQ Artemis prior to 2.20.0 or 2.19.1, an attacker could partially disrupt availability (DoS) through uncontrolled resource consumption of memory."}],"affected":[{"vendor":"Apache Software Foundation","product":"Apache ActiveMQ Artemis","versions":[{"version":"2.19.0","status":"affected","lessThan":"2.20.0","changes":[{"at":"2.19.1","status":"unaffected"}],"versionType":"custom"}]}],"references":[{"url":"https://lists.apache.org/thread/fjynj57rd99s814rdn5hzvmx8lz403q2","tags":["x_refsource_MISC"]},{"url":"https://security.netapp.com/advisory/ntap-20220303-0003/","tags":["x_refsource_CONFIRM"]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-770","description":"CWE-770 Allocation of Resources Without Limits or Throttling","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"apache","orgId":"f0158376-9dc2-43b6-827c-5f631a4d8d09","dateUpdated":"2023-07-07T15:24:43.281Z"},"source":{"advisory":"ARTEMIS-3593","discovery":"UNKNOWN"},"workarounds":[{"lang":"en","value":"Upgrade to Apache ActiveMQ Artemis 2.20.0 or 2.19.1 (if you're still using Java 8)."}],"x_generator":{"engine":"Vulnogram 0.0.9"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"security@apache.org","ID":"CVE-2022-23913","STATE":"PUBLIC","TITLE":"Apache ActiveMQ Artemis DoS"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Apache ActiveMQ Artemis","version":{"version_data":[{"version_affected":"<","version_name":"2.19.0","version_value":"2.20.0"},{"version_affected":"<","version_name":"2.19.0","version_value":"2.19.1"}]}}]},"vendor_name":"Apache Software Foundation"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"In Apache ActiveMQ Artemis prior to 2.20.0 or 2.19.1, an attacker could partially disrupt availability (DoS) through uncontrolled resource consumption of memory."}]},"generator":{"engine":"Vulnogram 0.0.9"},"impact":[{}],"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-770 Allocation of Resources Without Limits or Throttling"}]}]},"references":{"reference_data":[{"name":"https://lists.apache.org/thread/fjynj57rd99s814rdn5hzvmx8lz403q2","refsource":"MISC","url":"https://lists.apache.org/thread/fjynj57rd99s814rdn5hzvmx8lz403q2"},{"name":"https://security.netapp.com/advisory/ntap-20220303-0003/","refsource":"CONFIRM","url":"https://security.netapp.com/advisory/ntap-20220303-0003/"}]},"source":{"advisory":"ARTEMIS-3593","discovery":"UNKNOWN"},"work_around":[{"lang":"en","value":"Upgrade to Apache ActiveMQ Artemis 2.20.0 or 2.19.1 (if you're still using Java 8)."}]}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://lists.apache.org/thread/fjynj57rd99s814rdn5hzvmx8lz403q2","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20220303-0003/","tags":["x_refsource_CONFIRM","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T03:59:22.547Z"}}]}}}