RHSA-2024:11559: eap8-activemq-artemis Red Hat

CVSS: 7.1v3.1HighPublished

Published 20-12-2024Last modified 15-09-2026

Open JSON

Vulnerability summary

RHSA-2024:11559 is a high (CVSS 7.1) vulnerability in eap8-activemq-artemis Red Hat.

Overall risk

28/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.1/10

010

High · v3.1 (OSV · Red hat), selected by version preference

EPSS score

Not scored

0%100%

No EPSS score yet

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 2 · Downstream 0

CVE-2024-4109 CVE-2024-51127

Timeline

20-12-2024
PublishedVulnerability first disclosed.
15-09-2026
Last modifiedVulnerability information updated.

Description

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.5 Security update

CVSS metrics

1 score · 1 source · 1 version

v3.17.1

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat109 products

eap8-activemq-artemis< 0:2.33.0-2.redhat_00016.1.el8eap
eap8-activemq-artemis-cli< 0:2.33.0-2.redhat_00016.1.el8eap
eap8-activemq-artemis-commons< 0:2.33.0-2.redhat_00016.1.el8eap
eap8-activemq-artemis-core-client< 0:2.33.0-2.redhat_00016.1.el8eap
eap8-activemq-artemis-dto< 0:2.33.0-2.redhat_00016.1.el8eap

eap8-activemq-artemis-hornetq-protocol< 0:2.33.0-2.redhat_00016.1.el8eap
eap8-activemq-artemis-hqclient-protocol< 0:2.33.0-2.redhat_00016.1.el8eap
eap8-activemq-artemis-jakarta-client< 0:2.33.0-2.redhat_00016.1.el8eap
eap8-activemq-artemis-jakarta-ra< 0:2.33.0-2.redhat_00016.1.el8eap
eap8-activemq-artemis-jakarta-server< 0:2.33.0-2.redhat_00016.1.el8eap
eap8-activemq-artemis-jakarta-service-extensions< 0:2.33.0-2.redhat_00016.1.el8eap
eap8-activemq-artemis-jdbc-store< 0:2.33.0-2.redhat_00016.1.el8eap
eap8-activemq-artemis-journal< 0:2.33.0-2.redhat_00016.1.el8eap
eap8-activemq-artemis-selector< 0:2.33.0-2.redhat_00016.1.el8eap
eap8-activemq-artemis-server< 0:2.33.0-2.redhat_00016.1.el8eap
eap8-angus-activation< 0:2.0.2-1.redhat_00001.1.el8eap
eap8-apache-commons-lang< 0:3.14.0-3.redhat_00007.1.el8eap
eap8-atinject< 0:2.0.1-3.redhat_00006.1.el8eap
eap8-azure-storage< 0:8.6.6-4.redhat_00001.1.el8eap
eap8-commons-logging-jboss-logging< 0:1.0.0-2.Final_redhat_1.1.el8eap
eap8-eap-product-conf-parent< 0:800.5.0-1.GA_redhat_00001.1.el8eap
eap8-eap-product-conf-wildfly-ee-feature-pack< 0:800.5.0-1.GA_redhat_00001.1.el8eap
eap8-ecj< 1:3.31.0-2.redhat_00001.1.el8eap
eap8-expressly< 0:5.0.0-5.redhat_00001.1.el8eap
eap8-hal-console< 0:3.6.20-1.Final_redhat_00001.1.el8eap
eap8-hibernate< 0:6.2.32-1.Final_redhat_00001.1.el8eap
eap8-hibernate-core< 0:6.2.32-1.Final_redhat_00001.1.el8eap
eap8-hibernate-envers< 0:6.2.32-1.Final_redhat_00001.1.el8eap
eap8-hornetq< 0:2.4.10-1.Final_redhat_00001.1.el8eap
eap8-hornetq-commons< 0:2.4.10-1.Final_redhat_00001.1.el8eap
eap8-hornetq-core-client< 0:2.4.10-1.Final_redhat_00001.1.el8eap
eap8-hornetq-jakarta-client< 0:2.4.10-1.Final_redhat_00001.1.el8eap
eap8-jakarta-activation< 0:2.1.3-1.redhat_00001.1.el8eap
eap8-jakarta-authentication< 0:3.0.3-2.Final_redhat_00001.1.el8eap
eap8-jakarta-authorization< 0:3.0.3-2.Final_redhat_00001.1.el8eap
eap8-jakarta-client-resteasy< 0:3.0.3-2.Final_redhat_00001.1.el8eap
eap8-jakarta-client-webservices< 0:3.0.3-2.Final_redhat_00001.1.el8eap
eap8-jakarta-security< 0:3.0.3-2.Final_redhat_00001.1.el8eap
eap8-jakarta-xml-bind-api< 0:4.0.2-1.redhat_00001.1.el8eap
eap8-jansi< 0:1.18.0-2.redhat_00001.1.el8eap
eap8-javaee-security-soteria< 0:3.0.0-3.redhat_00001.1.el8eap
eap8-javaee-security-soteria-enterprise< 0:3.0.0-3.redhat_00001.1.el8eap
eap8-jboss-ejb-client< 0:5.0.8-1.Final_redhat_00001.1.el8eap
eap8-jboss-marshalling< 0:2.1.6-1.Final_redhat_00001.1.el8eap
eap8-jboss-marshalling-river< 0:2.1.6-1.Final_redhat_00001.1.el8eap
eap8-jboss-remoting< 0:5.0.30-1.Final_redhat_00001.1.el8eap
eap8-jboss-weld-api< 0:5.0.0-4.SP3_redhat_00001.1.el8eap
eap8-jboss-weld-api-weld-api< 0:5.0.0-4.SP3_redhat_00001.1.el8eap
eap8-jboss-weld-api-weld-spi< 0:5.0.0-4.SP3_redhat_00001.1.el8eap
eap8-jbossws-cxf< 0:7.3.0-1.Final_redhat_00001.1.el8eap
eap8-jctools< 0:4.0.5-1.redhat_00001.1.el8eap
eap8-jctools-core< 0:4.0.5-1.redhat_00001.1.el8eap
eap8-jsonb-spec< 0:3.0.1-1.redhat_00002.1.el8eap
eap8-narayana< 0:6.0.4-1.Final_redhat_00001.1.el8eap
eap8-narayana-jbosstxbridge< 0:6.0.4-1.Final_redhat_00001.1.el8eap
eap8-narayana-jbossxts< 0:6.0.4-1.Final_redhat_00001.1.el8eap
eap8-narayana-jts-idlj< 0:6.0.4-1.Final_redhat_00001.1.el8eap
eap8-narayana-jts-integration< 0:6.0.4-1.Final_redhat_00001.1.el8eap
eap8-narayana-restat-api< 0:6.0.4-1.Final_redhat_00001.1.el8eap
eap8-narayana-restat-bridge< 0:6.0.4-1.Final_redhat_00001.1.el8eap
eap8-narayana-restat-integration< 0:6.0.4-1.Final_redhat_00001.1.el8eap
eap8-narayana-restat-util< 0:6.0.4-1.Final_redhat_00001.1.el8eap
eap8-netty< 0:4.1.114-1.Final_redhat_00001.1.el8eap
eap8-netty-buffer< 0:4.1.114-1.Final_redhat_00001.1.el8eap
eap8-netty-codec< 0:4.1.114-1.Final_redhat_00001.1.el8eap
eap8-netty-codec-dns< 0:4.1.114-1.Final_redhat_00001.1.el8eap
eap8-netty-codec-http< 0:4.1.114-1.Final_redhat_00001.1.el8eap
eap8-netty-codec-socks< 0:4.1.114-1.Final_redhat_00001.1.el8eap
eap8-netty-common< 0:4.1.114-1.Final_redhat_00001.1.el8eap
eap8-netty-handler< 0:4.1.114-1.Final_redhat_00001.1.el8eap
eap8-netty-handler-proxy< 0:4.1.114-1.Final_redhat_00001.1.el8eap
eap8-netty-resolver< 0:4.1.114-1.Final_redhat_00001.1.el8eap
eap8-netty-resolver-dns< 0:4.1.114-1.Final_redhat_00001.1.el8eap
eap8-netty-transport< 0:4.1.114-1.Final_redhat_00001.1.el8eap
eap8-netty-transport-classes-epoll< 0:4.1.114-1.Final_redhat_00001.1.el8eap
eap8-netty-transport-native-epoll< 0:4.1.114-1.Final_redhat_00001.1.el8eap
eap8-netty-transport-native-epoll-debuginfo< 0:4.1.114-1.Final_redhat_00001.1.el8eap
eap8-netty-transport-native-unix-common< 0:4.1.114-1.Final_redhat_00001.1.el8eap
eap8-parsson< 0:1.1.7-1.redhat_00002.1.el8eap
eap8-resteasy< 0:6.2.11-1.Final_redhat_00001.1.el8eap
eap8-resteasy-atom-provider< 0:6.2.11-1.Final_redhat_00001.1.el8eap
eap8-resteasy-cdi< 0:6.2.11-1.Final_redhat_00001.1.el8eap
eap8-resteasy-client< 0:6.2.11-1.Final_redhat_00001.1.el8eap
eap8-resteasy-client-api< 0:6.2.11-1.Final_redhat_00001.1.el8eap
eap8-resteasy-core< 0:6.2.11-1.Final_redhat_00001.1.el8eap
eap8-resteasy-core-spi< 0:6.2.11-1.Final_redhat_00001.1.el8eap
eap8-resteasy-crypto< 0:6.2.11-1.Final_redhat_00001.1.el8eap
eap8-resteasy-jackson2-provider< 0:6.2.11-1.Final_redhat_00001.1.el8eap
eap8-resteasy-jaxb-provider< 0:6.2.11-1.Final_redhat_00001.1.el8eap
eap8-resteasy-jsapi< 0:6.2.11-1.Final_redhat_00001.1.el8eap
eap8-resteasy-json-binding-provider< 0:6.2.11-1.Final_redhat_00001.1.el8eap
eap8-resteasy-json-p-provider< 0:6.2.11-1.Final_redhat_00001.1.el8eap
eap8-resteasy-multipart-provider< 0:6.2.11-1.Final_redhat_00001.1.el8eap
eap8-resteasy-rxjava2< 0:6.2.11-1.Final_redhat_00001.1.el8eap
eap8-resteasy-validator-provider< 0:6.2.11-1.Final_redhat_00001.1.el8eap
eap8-undertow< 0:2.3.18-1.SP1_redhat_00001.1.el8eap
eap8-undertow-jastow< 0:2.2.8-1.Final_redhat_00001.1.el8eap
eap8-vdx< 0:1.1.6-3.redhat_1.1.el8eap
eap8-vdx-core< 0:1.1.6-3.redhat_1.1.el8eap
eap8-vdx-wildfly< 0:1.1.6-3.redhat_1.1.el8eap
eap8-wildfly< 0:8.0.5-3.GA_redhat_00002.1.el8eap
eap8-wildfly-elytron< 0:2.2.7-1.Final_redhat_00001.1.el8eap
eap8-wildfly-elytron-ee< 0:3.0.3-2.Final_redhat_00001.1.el8eap
eap8-wildfly-elytron-tool< 0:2.2.7-1.Final_redhat_00001.1.el8eap
eap8-wildfly-java-jdk11< 0:8.0.5-3.GA_redhat_00002.1.el8eap
eap8-wildfly-java-jdk17< 0:8.0.5-3.GA_redhat_00002.1.el8eap
eap8-wildfly-java-jdk21< 0:8.0.5-3.GA_redhat_00002.1.el8eap
eap8-wildfly-modules< 0:8.0.5-3.GA_redhat_00002.1.el8eap
eap8-yasson< 0:3.0.4-1.redhat_00002.1.el8eap

Show all 109

1 vendor · 109 products

References

43 links

Show all 43 references

issues.redhat.com/browse/JBEAP-27646ARTICLE
issues.redhat.com/browse/JBEAP-27662ARTICLE
issues.redhat.com/browse/JBEAP-27731ARTICLE
issues.redhat.com/browse/JBEAP-27894ARTICLE
issues.redhat.com/browse/JBEAP-27895ARTICLE
issues.redhat.com/browse/JBEAP-27941ARTICLE
issues.redhat.com/browse/JBEAP-28024ARTICLE
issues.redhat.com/browse/JBEAP-28026ARTICLE
issues.redhat.com/browse/JBEAP-28037ARTICLE
issues.redhat.com/browse/JBEAP-28046ARTICLE
issues.redhat.com/browse/JBEAP-28139ARTICLE
issues.redhat.com/browse/JBEAP-28140ARTICLE
issues.redhat.com/browse/JBEAP-28211ARTICLE
issues.redhat.com/browse/JBEAP-28248ARTICLE
issues.redhat.com/browse/JBEAP-28265ARTICLE
issues.redhat.com/browse/JBEAP-28288ARTICLE
issues.redhat.com/browse/JBEAP-28325ARTICLE
issues.redhat.com/browse/JBEAP-28336ARTICLE
issues.redhat.com/browse/JBEAP-28337ARTICLE
issues.redhat.com/browse/JBEAP-28338ARTICLE
issues.redhat.com/browse/JBEAP-28378ARTICLE
issues.redhat.com/browse/JBEAP-28386ARTICLE
issues.redhat.com/browse/JBEAP-28541ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_11559.jsonAdvisory
access.redhat.com/security/cve/CVE-2024-4109REPORT
www.cve.org/CVERecord?id=CVE-2024-4109Advisory
nvd.nist.gov/vuln/detail/CVE-2024-4109Advisory
github.com/undertow-io/undertow/pull/1668ARTICLE
access.redhat.com/security/cve/CVE-2024-51127REPORT
www.cve.org/CVERecord?id=CVE-2024-51127Advisory
nvd.nist.gov/vuln/detail/CVE-2024-51127Advisory
hornetq.comARTICLE
github.com/JAckLosingHeart/CWE-378/blob/main/CVE-2024-51127.mdARTICLE