This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2014-3600 →

DEBIAN-CVE-2014-3600

XML external entity (XXE) vulnerability in Apache ActiveMQ 5.x before 5.10.1 allows remote consumers to have unspecified impact via vectors involving...

Original description

The description as published by the source.

XML external entity (XXE) vulnerability in Apache ActiveMQ 5.x before 5.10.1 allows remote consumers to have unspecified impact via vectors involving an XPath based selector when dequeuing XML messages.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 activemq

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.0+dfsg1-4"}]}]

Debian:13 activemq

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.0+dfsg1-4"}]}]

References

advisory security-tracker.debian.org