Candidate: CVE-2011-4905 PublicDate: 2012-01-05 16:55:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4905 http://secunia.com/advisories/47112 Description: Apache ActiveMQ before 5.6.0 allows remote attackers to cause a denial of service (file-descriptor exhaustion and broker crash or hang) by sending many openwire failover:tcp:// connection requests. Ubuntu-Description: Notes: Bugs: https://issues.apache.org/jira/browse/AMQ-3294 Priority: medium Discovered-by: Assigned-to: CVSS: Patches_activemq: upstream: http://svn.apache.org/viewvc?view=revision&revision=1209700 upstream: http://svn.apache.org/viewvc?view=revision&revision=1211844 upstream_activemq: released (5.6.0) hardy_activemq: DNE lucid_activemq: DNE maverick_activemq: DNE natty_activemq: DNE oneiric_activemq: ignored (reached end-of-life) precise_activemq: ignored (reached end-of-life) precise/esm_activemq: DNE (precise was needed) quantal_activemq: not-affected (5.6.0+dfsg-1) raring_activemq: not-affected (5.6.0+dfsg-1) saucy_activemq: not-affected (5.6.0+dfsg-1) trusty_activemq: not-affected (5.6.0+dfsg-1) trusty/esm_activemq: DNE (trusty was not-affected [5.6.0+dfsg-1]) utopic_activemq: not-affected (5.6.0+dfsg-1) vivid_activemq: not-affected (5.6.0+dfsg-1) vivid/stable-phone-overlay_activemq: DNE vivid/ubuntu-core_activemq: DNE wily_activemq: not-affected (5.6.0+dfsg-1) xenial_activemq: not-affected (5.6.0+dfsg-1) yakkety_activemq: not-affected (5.6.0+dfsg-1) zesty_activemq: not-affected (5.6.0+dfsg-1) devel_activemq: not-affected (5.6.0+dfsg-1)