CVE-2019-0222 PUBLISHED

In Apache ActiveMQ 5.0.0 - 5.15.8, unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive.

EPSS 10.28% · 93.1th percentile

Risk Scores

EPSS Score
10.28%
93.1th percentile

Affected Products

VendorProductVersions
Ubuntu:24.04:LTSmqtt-client0, 1.16-1
Ubuntu:Pro:16.04:LTSmqtt-client0, 1.10-1
Ubuntu:24.04:LTSactivemq5.17.6+dfsg-1, 0, 5.17.2+dfsg-2
Ubuntu:Pro:22.04:LTSactivemq5.16.1-1ubuntu0.1, 0, 5.16.1-1
Ubuntu:20.04:LTSmqtt-client1.14-1, 0
Ubuntu:25.10activemq5.17.6+dfsg-1, 0, 5.17.6+dfsg-2
Ubuntu:Pro:16.04:LTSactivemq5.6.0+dfsg1-4+deb8u1ubuntu1, 5.6.0+dfsg1-5, 5.13.2+dfsg-2
Ubuntu:25.10mqtt-client1.16-1, 0
Ubuntu:Pro:20.04:LTSactivemq5.15.10-1, 5.15.11-1ubuntu0.1~esm1, 0
Ubuntu:Pro:18.04:LTSmqtt-client0, 1.14-1
Ubuntu:Pro:18.04:LTSactivemq5.15.3-2, 5.15.8-2~18.04.1~esm1, 5.15.2-2

Timeline

References

Open in Interactive Console →