It was found that when Artemis and HornetQ before 2.4.0 are configured with UDP discovery and JGroups discovery a huge byte array is created when receiving an unexpected multicast message. This may result in a heap memory exhaustion, full GC, or OutOfMemoryError.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| org.hornetq:hornetq-server(Maven) | 0 | 2.4.0.Final | N/A |
| org.apache.activemq:artemis-native(Maven) | 0 | 2.4.0 | N/A |
CVSS Metrics
