Is CVE-2019-0222 being actively exploited?

It is not currently in CISA's KEV catalog. Its EPSS exploitation probability is 12%.

What products does CVE-2019-0222 affect?

Tracked products affected include ActiveMQ. Check the version you run to see whether it is affected.

How do I fix CVE-2019-0222?

Apply the vendor fix promptly. Upgrade affected products to a fixed version.

CVE-2019-0222

Q: What is CVE-2019-0222?

CVE-2019-0222 is a high-severity software vulnerability with a CVSS score of 7.5. In Apache ActiveMQ 5.0.0 - 5.15.8, unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive.

HIGH severity · CVSS 7.5

7.5CVSS HIGH

Summary

In Apache ActiveMQ 5.0.0 - 5.15.8, unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive.

Impact & exploitability

Attack vectorNetwork

Attack complexityLow

Privileges requiredNone

User interactionNone

Confidentiality impactNone

Integrity impactNone

Availability impactHigh

Exploit probability (EPSS)12%

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products we track (1)

ActiveMQ

Recommendation

Apply the vendor fix promptly. Open any affected product above for its exact safe version.

Additional information

NVD record
http://activemq.apache.org/security-advisories.data/CVE-2019-0222-announcement.txtAdvisory
http://www.openwall.com/lists/oss-security/2019/03/27/2Advisory
http://www.securityfocus.com/bid/107622Advisory
https://lists.apache.org/thread.html/03f91b1fb85686a848cee6b90112cf6059bd1b21b23bacaa11a962e1%40%3Cdev.activemq.apache.org%3E
https://lists.apache.org/thread.html/2b5c0039197a4949f29e1e2c9441ab38d242946b966f61c110808bcc%40%3Ccommits.activemq.apache.org%3E
https://lists.apache.org/thread.html/71640324661c1b6d0b6708bd4fb20170e1b979370a4b8cddc4f8d485%40%3Cdev.activemq.apache.org%3E
https://lists.apache.org/thread.html/7da9636557118178b1690ba0af49c8a7b7b97d925218b5774622f488%40%3Cusers.activemq.apache.org%3E
https://lists.apache.org/thread.html/a859563f05fbe7c31916b3178c2697165bd9bbf5a65d1cf62aef27d2%40%3Ccommits.activemq.apache.org%3E