Apache ActiveMQ NMS OpenWire Client Library DoS via unbounded length fields (CVE-2026-103582)
The .NET OpenWire client before 2.3.0 allows remote denial of service by unvalidated frame sizes in unmarshalling.
Stories per day · 30 days
3 RSS
2 stories, newest first · one card per story
Stories tagged #openwire
CVE-2026-67593: Apache Artemis, Apache ActiveMQ Artemis: Pre-authentication Openwire protocol handling can result in queue deletion
CVE-2026-67593: remote attackers can delete ActiveMQ Artemis queues via pre-authentication Openwire protocol handling in affected versions.