CVE-2015-5254
Critical · 9.8CVSS
9.8
EPSS
38.2%
Published
Jan 8, 2016
CISA due date
—
The record
Apache ActiveMQ 5.x before 5.13.0 does not restrict the classes that can be serialized in the broker, which allows remote attackers to execute arbitrary code via a crafted serialized Java Message Service (JMS) ObjectMessage object.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Maven | org.apache.activemq:activemq-client | 5.0.0 | 5.11.3 |
| Maven | org.apache.activemq:activemq-client | 5.12.0 | 5.12.2 |
| Debian:11 | activemq | 0 | 5.13.2+dfsg-1 |
| Debian:12 | activemq | 0 | 5.13.2+dfsg-1 |
| Debian:13 | activemq | 0 | 5.13.2+dfsg-1 |
| Debian:7 | activemq | 0 | 5.6.0+dfsg-1+deb7u2 |
| Debian:8 | activemq | 0 | 5.6.0+dfsg1-4+deb8u2 |
| Red Hat:openshift:2.0::el6 | activemq | 0 | 0:5.9.0-6.redhat.611454.el6op |
| Red Hat:openshift:2.0::el6 | activemq-client | 0 | 0:5.9.0-6.redhat.611454.el6op |
| Red Hat:openshift:2.0::el6 | jenkins | 0 | 0:1.625.3-1.el6op |
| Red Hat:openshift:2.0::el6 | openshift-enterprise-release | 0 | 0:2.2.9-1.el6op |
| Red Hat:openshift:2.0::el6 | openshift-enterprise-upgrade | 0 | 0:2.2.9-1.el6op |
| Red Hat:openshift:2.0::el6 | openshift-enterprise-upgrade-broker | 0 | 0:2.2.9-1.el6op |
| Red Hat:openshift:2.0::el6 | openshift-enterprise-upgrade-node | 0 | 0:2.2.9-1.el6op |
| Red Hat:openshift:2.0::el6 | openshift-enterprise-yum-validator | 0 | 0:2.2.9-1.el6op |
| Red Hat:openshift:2.0::el6 | openshift-origin-broker-util | 0 | 0:1.37.5.3-1.el6op |
| Red Hat:openshift:2.0::el6 | openshift-origin-cartridge-cron | 0 | 0:1.25.2.1-1.el6op |
| Red Hat:openshift:2.0::el6 | openshift-origin-cartridge-haproxy | 0 | 0:1.31.5.1-1.el6op |
| Red Hat:openshift:2.0::el6 | openshift-origin-cartridge-mysql | 0 | 0:1.31.2.1-1.el6op |
| Red Hat:openshift:2.0::el6 | openshift-origin-cartridge-php | 0 | 0:1.35.3.1-1.el6op |
| Red Hat:openshift:2.0::el6 | openshift-origin-cartridge-python | 0 | 0:1.34.2.1-1.el6op |
| Red Hat:openshift:2.0::el6 | openshift-origin-msg-node-mcollective | 0 | 0:1.30.2.1-1.el6op |
| Red Hat:openshift:2.0::el6 | openshift-origin-node-proxy | 0 | 0:1.26.2.1-1.el6op |
| Red Hat:openshift:2.0::el6 | openshift-origin-node-util | 0 | 0:1.38.6.2-1.el6op |
| Red Hat:openshift:2.0::el6 | php | 0 | 0:5.3.3-46.el6_7.1 |
| Red Hat:openshift:2.0::el6 | php-bcmath | 0 | 0:5.3.3-46.el6_7.1 |
| Red Hat:openshift:2.0::el6 | php-debuginfo | 0 | 0:5.3.3-46.el6_7.1 |
| Red Hat:openshift:2.0::el6 | php-devel | 0 | 0:5.3.3-46.el6_7.1 |
| Red Hat:openshift:2.0::el6 | php-fpm | 0 | 0:5.3.3-46.el6_7.1 |
| Red Hat:openshift:2.0::el6 | php-imap | 0 | 0:5.3.3-46.el6_7.1 |
| Red Hat:openshift:2.0::el6 | php-intl | 0 | 0:5.3.3-46.el6_7.1 |
| Red Hat:openshift:2.0::el6 | php-mbstring | 0 | 0:5.3.3-46.el6_7.1 |
| Red Hat:openshift:2.0::el6 | php-process | 0 | 0:5.3.3-46.el6_7.1 |
| Red Hat:openshift:2.0::el6 | rhc | 0 | 0:1.38.6.1-1.el6op |
| Red Hat:openshift:2.0::el6 | rubygem-openshift-origin-common | 0 | 0:1.29.5.2-1.el6op |
| Red Hat:openshift:2.0::el6 | rubygem-openshift-origin-console | 0 | 0:1.35.5.1-1.el6op |
| Red Hat:openshift:2.0::el6 | rubygem-openshift-origin-controller | 0 | 0:1.38.5.1-1.el6op |
| Red Hat:openshift:2.0::el6 | rubygem-openshift-origin-frontend-apache-vhost | 0 | 0:0.13.2.1-1.el6op |
| Red Hat:openshift:2.0::el6 | rubygem-openshift-origin-node | 0 | 0:1.38.5.3-1.el6op |
| Ubuntu:14.04:LTS | activemq | 0 | 5.6.0+dfsg-1+deb7u2build0.14.04.1 |
| Ubuntu:16.04:LTS | activemq | 0 | 5.13.2+dfsg-2 |
| maven | org.apache.activemq/activemq-client | 5.0.0 | 5.13.0 |
Related vulnerabilities
- CVE-2015-7559 It was found that the Apache ActiveMQ client before 5.14.5 exposed a remote shutdown… Also affects org.apache.activemq:activemq-client
- CVE-2016-3088 The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote… Also affects org.apache.activemq:activemq-client
- CVE-2015-1830 Directory traversal vulnerability in the fileserver upload/download functionality for… Also affects org.apache.activemq:activemq-client
- CVE-2014-3576 The processControlCommand function in broker/TransportConnection.java in Apache ActiveMQ… Also affects org.apache.activemq:activemq-client
- CVE-2021-26117 The optional ActiveMQ LDAP login module can be configured to use anonymous access to the… Also affects activemq
- CVE-2016-0792 Multiple unspecified API endpoints in Jenkins before 1.650 and LTS before 1.642.2 allow… Also affects activemq
- CVE-2016-0788 The remoting module in Jenkins before 1.650 and LTS before 1.642.2 allows remote… Also affects activemq
- CVE-2015-8103 The Jenkins CLI subsystem in Jenkins before 1.638 and LTS before 1.625.2 allows remote… Also affects activemq