BIT-activemq-2025-27533

BIT-activemq-2025-27533 PUBLISHED CVSS 6.900000095367432 MEDIUM

Apache ActiveMQ: Unchecked buffer length can cause excessive memory allocation

Risk Scores

CVSS 4.0

6.900000095367432

CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:A/V:D/RE:M/U:Red

Affected Products

Vendor	Product	Versions
Bitnami	activemq	5.16.0, 5.17.0, 5.18.0

Exploit Intelligence

exploit for CVE-2025-27533, a Denial of Service (DoS) vulnerability in Apache ActiveMQ (github-poc)

Timeline

Dec 3, 2025 CVE Published
Dec 3, 2025 CVE Updated

References

http://www.openwall.com/lists/oss-security/2025/05/06/1 url
https://lists.apache.org/thread/8hcm25vf7mchg4zbbhnlx2lc5bs705hg url
https://lists.debian.org/debian-lts-announce/2025/06/msg00020.html url
https://nvd.nist.gov/vuln/detail/CVE-2025-27533 url

Open in Interactive Console →