CVE-2015-7559: Input Validation

Reference Links

• https://exchange.xforce.ibmcloud.com/vulnerabilities/170664
• https://www.ibm.com/support/pages/node/7001693 (Advisory)
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-7559
• https://issues.apache.org/jira/browse/AMQ-6470
• https://nvd.nist.gov/vuln/detail/CVE-2015-7559
• https://github.com/apache/activemq/commit/b8fc78ec6c367cbe2a40a674eaec64ac3d7d1ec
• https://github.com/advisories/GHSA-jvpp-hxjj-5ccc (Advisory)

Parent vulnerabilities

(Appears in the following advisories)

• IBM-7001693

Frequently Asked Questions

• What is CVE-2015-7559?

  CVE-2015-7559 is a vulnerability in the Apache ActiveMQ client that can be exploited by a remote authenticated attacker to cause a denial of service.

• What is the severity of CVE-2015-7559?

  The severity of CVE-2015-7559 is medium, with a severity value of 6.5.

• How does CVE-2015-7559 affect Apache ActiveMQ?

  CVE-2015-7559 affects Apache ActiveMQ versions up to and including 5.14.5, and versions between 5.15.0 and 5.15.5. It allows a remote authenticated attacker to execute a remote shutdown command, causing the application to stop responding.

• Are Redhat Jboss A-mq and Redhat Jboss Fuse affected by CVE-2015-7559?

  Yes, Redhat Jboss A-mq version 6.2.1 and Redhat Jboss Fuse version 6.3 are affected by CVE-2015-7559.

• Is IBM Security Directory Suite VA affected by CVE-2015-7559?

  IBM Security Directory Suite VA version up to and including 8.0.1.19 is affected by CVE-2015-7559.