CVE-2017-12174

—

CVSS 3.1

7.5 high

EPSS

6%p93

Published

Mar 7, 2018 (Mar 7, 2018)

Modified

Jun 17, 2026

Description

It was found that when Artemis and HornetQ before 2.4.0 are configured with UDP discovery and JGroups discovery a huge byte array is created when receiving an unexpected multicast message. This may result in a heap memory exhaustion, full GC, or OutOfMemoryError.

Vendors: apache redhat
Products: artemis, hornetq, jboss enterprise application platform
Weakness: CWE-400
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (6.0%)

In the news0 stories

No ingested article mentions this CVE yet.