CVE-2021-4040
MediumCVSS 5.3Exploitation Probability (EPSS)
High risk82th percentile - higher than 82% of all known CVEs
Summary
A flaw was found in AMQ Broker that can lead to partial interruption of system availability due to an Out of Memory (OOM) condition. An attacker can partially disrupt availability to the broker through a sustained attack of maliciously crafted messages.
Risk Assessment
The highest threat from this vulnerability is system availability. This can lead to service interruptions for applications relying on AMQ Broker.
Recommendation
It is recommended to monitor and limit the number of messages sent to AMQ Broker and implement mechanisms to protect against OOM attacks.
Original NVD description (English source)
A flaw was found in AMQ Broker. This issue can cause a partial interruption to the availability of AMQ Broker via an Out of memory (OOM) condition. This flaw allows an attacker to partially disrupt availability to the broker through a sustained attack of maliciously crafted messages. The highest threat from this vulnerability is system availability.