{"id":"CVE-2019-0222","aliases":["DEBIAN-CVE-2019-0222","DLA-2582-1","DLA-2583-1","EUVD-2019-0423","GHSA-jpv3-g4cc-6vfx","UBUNTU-CVE-2019-0222","USN-6685-1"],"status":"published","title":"Improper Control of Generation of Code ('Code Injection') in org.apache.activemq:activemq-client","description":"In Apache ActiveMQ 5.0.0 - 5.15.8, unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.12033,"percentile":0.96162,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-94"],"published":"2019-03-28T21:16:12Z","modified":"2026-10-24T10:30:54Z","exploits":[{"source":"pocgithub","id":"shoucheng3/apache__activemq_CVE-2019-0222_5-15-8","title":"shoucheng3/apache__activemq_CVE-2019-0222_5-15-8","date":"2025-08-21","url":"https://github.com/shoucheng3/apache__activemq_CVE-2019-0222_5-15-8"}],"fixes":[{"ecosystem":"Maven","package":"org.apache.activemq:activemq-client","fixed_in":["5.15.9"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:12","package":"activemq","fixed_in":["5.15.9-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"activemq","fixed_in":["5.15.9-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"mqtt-client","fixed_in":["1.16-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"mqtt-client","fixed_in":["1.16-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"mqtt-client","fixed_in":["1.16-1"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"mqtt-client","fixed_in":["1.14-1+deb9u1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"mqtt-client","fixed_in":["1.10-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"mqtt-client","fixed_in":["1.14-1ubuntu0.18.04.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"mqtt-client","fixed_in":["1.14-1+deb10u1build0.20.04.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"org.apache.activemq:activemq-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.15.9"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"activemq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.9-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"activemq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.9-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"mqtt-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"mqtt-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"mqtt-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"mqtt-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14-1+deb9u1"}]}],"versions":["1.14-1"]},{"source":"osv","ecosystem":"Debian:9","package":"activemq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.3-3+deb9u2"}]}],"versions":["5.14.3-3","5.14.3-3+deb9u1"],"bundled":4},{"source":"osv","ecosystem":"Maven","package":"org.apache.activemq:activemq-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.15.9"}]}],"versions":["5.10.0","5.10.1","5.10.2","5.11.0","5.11.1","5.11.2","5.11.3","5.11.4","5.12.0","5.12.1","5.12.2","5.12.3","5.13.0","5.13.1","5.13.2","5.13.3","5.13.4","5.13.5","5.14.0","5.14.1","5.14.2","5.14.3","5.14.4","5.14.5","5.15.0","5.15.1","5.15.2","5.15.3","5.15.4","5.15.5","5.15.6","5.15.7","5.15.8","5.8.0","5.9.0","5.9.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"mqtt-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10-1ubuntu0.1~esm1"}]}],"versions":["1.10-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"activemq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.6.0+dfsg1-4+deb8u1ubuntu1","5.6.0+dfsg1-5","5.13.2+dfsg-2","5.13.2+dfsg-2ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"activemq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.14.5-3","5.15.2-2","5.15.3-2","5.15.8-2~18.04","5.15.8-2~18.04.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"mqtt-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14-1ubuntu0.18.04.1~esm1"}]}],"versions":["1.14-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"mqtt-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14-1+deb10u1build0.20.04.1"}]}],"versions":["1.14-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"activemq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.10-1","5.15.11-1","5.15.11-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"activemq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.16.1-1","5.16.1-1ubuntu0.1~esm1","5.16.1-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"activemq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.17.2+dfsg-2","5.17.6+dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"mqtt-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.16-1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"activemq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.17.6+dfsg-1","5.17.6+dfsg-2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"mqtt-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.16-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"activemq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.17.6+dfsg-2","5.17.6+dfsg-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"mqtt-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.16-1build1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"activemq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.17.6+dfsg-2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"mqtt-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.16-1","1.16-1build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"mqtt-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10-1ubuntu0.1~esm1"}]}],"versions":["1.10-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"mqtt-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14-1ubuntu0.18.04.1~esm1"}]}],"versions":["1.14-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"mqtt-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14-1+deb10u1build0.20.04.1"}]}],"versions":["1.14-1"]}],"products":[{"vendor":"apache","product":"activemq"},{"vendor":"apache","product":"apache activemq"},{"vendor":"apache software foundation","product":"apache activemq"},{"vendor":"debian","product":"debian_linux"},{"vendor":"netapp","product":"e-series_santricity_web_services"},{"vendor":"oracle","product":"communications_diameter_signaling_router"},{"vendor":"oracle","product":"enterprise_manager_base_platform"},{"vendor":"oracle","product":"enterprise_repository"},{"vendor":"oracle","product":"goldengate_stream_analytics"},{"vendor":"oracle","product":"identity_manager_connector"}],"references":[{"url":"https://lists.apache.org/thread.html/2b5c0039197a4949f29e1e2c9441ab38d242946b966f61c110808bcc%40%3Ccommits.activemq.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/7da9636557118178b1690ba0af49c8a7b7b97d925218b5774622f488%40%3Cusers.activemq.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/d1e334bd71d6e68462c62c726fe6db565c7a6283302f9c1feed087fa%40%3Ccommits.activemq.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/71640324661c1b6d0b6708bd4fb20170e1b979370a4b8cddc4f8d485%40%3Cdev.activemq.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://www.openwall.com/lists/oss-security/2019/03/27/2","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","web","report"]},{"url":"https://lists.apache.org/thread.html/fcbe6ad00f1de142148c20d813fae3765dc4274955e3e2f3ca19ff7b%40%3Cdev.activemq.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/a859563f05fbe7c31916b3178c2697165bd9bbf5a65d1cf62aef27d2%40%3Ccommits.activemq.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/03f91b1fb85686a848cee6b90112cf6059bd1b21b23bacaa11a962e1%40%3Cdev.activemq.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/107622","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://lists.apache.org/thread.html/rb698ed085f79e56146ca24ab359c9ef95846618675ea1ef402e04a6d%40%3Ccommits.activemq.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://www.oracle.com/security-alerts/cpujul2020.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","web"]},{"url":"http://activemq.apache.org/security-advisories.data/CVE-2019-0222-announcement.txt","tags":["x_refsource_CONFIRM","x_transferred","Mitigation","Third Party Advisory","advisory","web","report"]},{"url":"https://security.netapp.com/advisory/ntap-20190502-0006/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.apache.org/thread.html/re4672802b0e5ed67c08c9e77057d52138e062f77cc09581b723cf95a%40%3Ccommits.activemq.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r946488fb942fd35c6a6e0359f52504a558ed438574a8f14d36d7dcd7%40%3Ccommits.activemq.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/03/msg00004.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/03/msg00005.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-0222","tags":["advisory"]},{"url":"https://lists.apache.org/thread.html/03f91b1fb85686a848cee6b90112cf6059bd1b21b23bacaa11a962e1@%3Cdev.activemq.apache.org%3E","tags":["web","report"]},{"url":"https://lists.apache.org/thread.html/2b5c0039197a4949f29e1e2c9441ab38d242946b966f61c110808bcc@%3Ccommits.activemq.apache.org%3E","tags":["web","report"]},{"url":"https://lists.apache.org/thread.html/71640324661c1b6d0b6708bd4fb20170e1b979370a4b8cddc4f8d485@%3Cdev.activemq.apache.org%3E","tags":["web","report"]},{"url":"https://lists.apache.org/thread.html/7da9636557118178b1690ba0af49c8a7b7b97d925218b5774622f488@%3Cusers.activemq.apache.org%3E","tags":["web","report"]},{"url":"https://lists.apache.org/thread.html/a859563f05fbe7c31916b3178c2697165bd9bbf5a65d1cf62aef27d2@%3Ccommits.activemq.apache.org%3E","tags":["web","report"]},{"url":"https://lists.apache.org/thread.html/d1e334bd71d6e68462c62c726fe6db565c7a6283302f9c1feed087fa@%3Ccommits.activemq.apache.org%3E","tags":["web","report"]},{"url":"https://lists.apache.org/thread.html/fcbe6ad00f1de142148c20d813fae3765dc4274955e3e2f3ca19ff7b@%3Cdev.activemq.apache.org%3E","tags":["web","report"]},{"url":"https://lists.apache.org/thread.html/r946488fb942fd35c6a6e0359f52504a558ed438574a8f14d36d7dcd7@%3Ccommits.activemq.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rb698ed085f79e56146ca24ab359c9ef95846618675ea1ef402e04a6d@%3Ccommits.activemq.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/re4672802b0e5ed67c08c9e77057d52138e062f77cc09581b723cf95a@%3Ccommits.activemq.apache.org%3E","tags":["web"]},{"url":"https://github.com/apache/activemq/commit/98b9f2e","tags":["web"]},{"url":"https://github.com/apache/activemq/commit/f78c0962ffb46fae3397eed6b7ec1e6e15045031","tags":["web"]},{"url":"https://web.archive.org/web/20190404065432/http://www.securityfocus.com/bid/107622","tags":["web"]},{"url":"https://security.netapp.com/advisory/ntap-20190502-0006","tags":["web"]},{"url":"https://github.com/advisories/GHSA-jpv3-g4cc-6vfx"},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-0222","tags":["advisory"]},{"url":"https://github.com/apache/activemq","tags":["package"]},{"url":"https://ubuntu.com/security/CVE-2019-0222","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6685-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-0222","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2019-0222","description":"In Apache ActiveMQ 5.0.0 - 5.15.8, unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive.","status":"published","published":"2019-03-28T21:16:12Z","modified":"2024-08-04T17:44:15.392Z","updated_at":"2026-11-02T14:32:24.110857Z"}],"euvd":[{"id":"EUVD-2019-0423","description":"In Apache ActiveMQ 5.0.0 - 5.15.8, unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive.","status":"published","published":"2019-03-28T21:16:12Z","modified":"2024-08-04T17:44:15Z","updated_at":"2026-11-03T03:07:02.049822Z"}],"ghsa":[{"id":"GHSA-jpv3-g4cc-6vfx","title":"Improper Control of Generation of Code ('Code Injection') in org.apache.activemq:activemq-client","description":"In Apache ActiveMQ 5.0.0 - 5.15.8, unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive.","status":"published","published":"2019-04-02T15:46:42Z","modified":"2024-03-14T22:09:45Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:37:40.81935Z"}],"nvd":[{"id":"CVE-2019-0222","description":"In Apache ActiveMQ 5.0.0 - 5.15.8, unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive.","status":"published","published":"2019-03-28T22:29:00.433Z","modified":"2026-06-17T02:08:01.337Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:05:09.523883Z"}],"osv":[{"id":"CVE-2019-0222","description":"In Apache ActiveMQ 5.0.0 - 5.15.8, unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive.","status":"published","published":"2019-03-28T22:29:00.433Z","modified":"2026-10-24T10:30:54.364570005Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:10.051046Z"},{"id":"DEBIAN-CVE-2019-0222","description":"In Apache ActiveMQ 5.0.0 - 5.15.8, unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive.","status":"published","published":"2019-03-28T22:29:00.433Z","modified":"2026-09-21T07:00:08.99058967Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:31.170944Z"},{"id":"GHSA-jpv3-g4cc-6vfx","title":"Improper Control of Generation of Code ('Code Injection') in org.apache.activemq:activemq-client","description":"In Apache ActiveMQ 5.0.0 - 5.15.8, unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive.","status":"published","published":"2019-04-02T15:46:42Z","modified":"2024-03-14T22:16:37.154401Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T15:46:50.687609Z"},{"id":"UBUNTU-CVE-2019-0222","description":"In Apache ActiveMQ 5.0.0 - 5.15.8, unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive.","status":"published","published":"2019-03-28T22:29:00Z","modified":"2026-10-17T12:55:29.596628155Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:18.772093Z"},{"id":"DLA-2582-1","title":"mqtt-client - security update","status":"published","published":"2021-03-05T00:00:00Z","modified":"2026-03-09T01:20:28.544185Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"DLA-2583-1","title":"activemq - security update","status":"published","published":"2021-03-05T00:00:00Z","modified":"2026-03-09T01:19:31.149783Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"USN-6685-1","title":"mqtt-client vulnerability","description":"It was discovered that mqtt-client incorrectly handled memory while parsing\nmalformed MQTT frames. An attacker could possibly use this issue to cause a\ncrash, resulting in a denial of service, or possibly execute arbitrary code.\n","status":"published","published":"2024-03-07T21:18:06Z","modified":"2026-06-25T13:32:28.641280475Z","updated_at":"2026-11-02T16:58:17.914523Z"}]}}