High severity7.5NVD Advisory· Published Feb 4, 2022· Updated Jun 17, 2026
CVE-2022-23913
CVE-2022-23913
Description
In Apache ActiveMQ Artemis prior to 2.20.0 or 2.19.1, an attacker could partially disrupt availability (DoS) through uncontrolled resource consumption of memory.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.apache.activemq:artemis-core-clientMaven | < 2.19.1 | 2.19.1 |
Affected products
5- cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*
- cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*
- Apache Software Foundation/Apache ActiveMQ Artemisv5Range: 2.19.0
Patches
Vulnerability mechanics
References
11- lists.apache.org/thread/fjynj57rd99s814rdn5hzvmx8lz403q2nvdExploitIssue TrackingMailing ListThird Party AdvisoryWEB
- github.com/advisories/GHSA-pr38-qpxm-g88xghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2022-23913ghsaADVISORY
- security.netapp.com/advisory/ntap-20220303-0003/nvdThird Party Advisory
- github.com/apache/activemq-artemis/pull/3862ghsaWEB
- github.com/apache/activemq-artemis/pull/3862/commits/1f92368240229b8f5db92a92a72c703faf83e9b7ghsaWEB
- github.com/apache/activemq-artemis/pull/3871ghsaWEB
- github.com/apache/activemq-artemis/pull/3871/commits/153d2e9a979aead8dff95fbc91d659ecc7d0fb82ghsaWEB
- github.com/github/codeql-java-CVE-coverage/issues/1061ghsaWEB
- issues.apache.org/jira/browse/ARTEMIS-3593ghsaWEB
- security.netapp.com/advisory/ntap-20220303-0003ghsaWEB
News mentions
0No linked articles in our index yet.