CVE-2011-4905
Denial of Service in Apache ActiveMQ
Apache ActiveMQ before 5.6.0 allows remote attackers to cause a denial of service (file-descriptor exhaustion and broker crash or hang) by sending many openwire failover:tcp:// connection requests.
Exploit likelihood
What each source reports
NVD Score used
Apache ActiveMQ before 5.6.0 allows remote attackers to cause a denial of service (file-descriptor exhaustion and broker crash or hang) by sending many openwire failover:tcp:// connection requests.
- Record
CVE-2011-4905- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
Apache ActiveMQ before 5.6.0 allows remote attackers to cause a denial of service (file-descriptor exhaustion and broker crash or hang) by sending many openwire failover:tcp:// connection requests.
- Record
CVE-2011-4905- Updated
- 2026-11-02
EUVDEUVD-2022-3455 No score
Apache ActiveMQ before 5.6.0 allows remote attackers to cause a denial of service (file-descriptor exhaustion and broker crash or hang) by sending many openwire failover:tcp:// connection requests.
- Record
EUVD-2022-3455- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9wcx-326r-7j7w No score
Denial of Service in Apache ActiveMQ
Apache ActiveMQ before 5.6.0 allows remote attackers to cause a denial of service (file-descriptor exhaustion and broker crash or hang) by sending many openwire failover:tcp:// connection requests.
- Record
GHSA-9wcx-326r-7j7w- Updated
- 2026-11-02
OSV No score
Apache ActiveMQ before 5.6.0 allows remote attackers to cause a denial of service (file-descriptor exhaustion and broker crash or hang) by sending many openwire failover:tcp:// connection requests.
- Record
CVE-2011-4905- Updated
- 2026-11-02
OSVDEBIAN-CVE-2011-4905 No score
Apache ActiveMQ before 5.6.0 allows remote attackers to cause a denial of service (file-descriptor exhaustion and broker crash or hang) by sending many openwire failover:tcp:// connection requests.
- Record
DEBIAN-CVE-2011-4905- Updated
- 2026-11-02
OSVGHSA-9wcx-326r-7j7w No score
Denial of Service in Apache ActiveMQ
Apache ActiveMQ before 5.6.0 allows remote attackers to cause a denial of service (file-descriptor exhaustion and broker crash or hang) by sending many openwire failover:tcp:// connection requests.
- Record
GHSA-9wcx-326r-7j7w- Updated
- 2026-11-02
OSVUBUNTU-CVE-2011-4905 No score
Apache ActiveMQ before 5.6.0 allows remote attackers to cause a denial of service (file-descriptor exhaustion and broker crash or hang) by sending many openwire failover:tcp:// connection requests.
- Record
UBUNTU-CVE-2011-4905- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.apache.activemq:activemq-coreMaven |
before 5.6.0 | 5.6.0 |
activemqDebian:12 |
before 5.5.0+dfsg-5 | 5.5.0+dfsg-5 |
activemqDebian:13 |
before 5.5.0+dfsg-5 | 5.5.0+dfsg-5 |
org.apache.activemq:activemq-coreMaven |
before 5.6.0, plus listed versions 4.1.14.1.25.0.05.1.05.2.0 Show 9 moreShow less5.3.05.3.15.3.25.4.05.4.15.4.25.4.35.5.05.5.1 |
5.6.0 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-4905 is a medium vulnerability (CVSS 5.0) in Apache Activemq, published January 5, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 8.51%, the 95th percentile. Fixed in org.apache.activemq:activemq-core 5.6.0.
References
securityfocus.com/bid/50904
svn.apache.org/viewvc?view=revision&revision=1209700
openwall.com/lists/oss-security/2011/12/25/6
issues.apache.org/jira/browse/AMQ-3294
Show 11 moreShow less
secunia.com/advisories/47112
nvd.nist.gov/vuln/detail/CVE-2011-4905
github.com/apache/activemq/commit/3a71f8e33d0309cb0ca5b5758a8f251da205e757
security-tracker.debian.org/tracker/CVE-2011-4905
ubuntu.com/security/CVE-2011-4905
cve.org/CVERecord?id=CVE-2011-4905