¡¾Îó²îͨ¸æ¡¿Apache ActiveMQ NMS AMQP ·´ÐòÁл¯Îó²î(CVE-2025-54539)
Ðû²¼Ê±¼ä 2025-10-17Ò»¡¢Îó²î¸ÅÊö
Îó²îÃû³Æ | Apache ActiveMQ NMS AMQP ·´ÐòÁл¯Îó²î | ||
CVE ID | CVE-2025-54539 | ||
Îó²îÀàÐÍ | ·´ÐòÁл¯Îó²î | ·¢Ã÷ʱ¼ä | 2025-10-17 |
Îó²îÆÀ·Ö | 9.8 | Îó²îÆ·¼¶ | ÑÏÖØ |
¹¥»÷ÏòÁ¿ | ÍøÂç | ËùÐèȨÏÞ | ÎÞ |
ʹÓÃÄÑ¶È | µÍ | Óû§½»»¥ | ÐèÒª |
PoC/EXP | δ¹ûÕæ | ÔÚҰʹÓà | δ·¢Ã÷ |
Apache ActiveMQÊÇÒ»¿îÓÉApacheÈí¼þ»ù½ð»á¿ª·¢µÄ¿ªÔ´ÐÂÎÅÖÐÐļþ£¬£¬£¬£¬£¬£¬£¬Ö§³ÖJMS¡¢AMQP¡¢MQTT¡¢STOMPµÈ¶àÖÖÐÂÎÅÐÒé¡£¡£¡£¡£ËüÓÃÓÚ¹¹½¨¸ß¿É¿¿µÄÒì²½ÐÂÎÅת´ïϵͳ£¬£¬£¬£¬£¬£¬£¬ÊµÏÖÓ¦ÓüäµÄ½âñîÓëÒ첽ͨѶ£¬£¬£¬£¬£¬£¬£¬ÆÕ±éÓ¦ÓÃÓÚÆóÒµ¼¶ÐÂÎÅÐÐÁС¢ÂþÑÜʽϵͳÓë΢ЧÀͼܹ¹ÖС£¡£¡£¡£
2025Äê10ÔÂ17ÈÕ£¬£¬£¬£¬£¬£¬£¬°ÙÀÖ²©¼¯ÍÅVSRC¼à²âµ½Apache ActiveMQ NMS AMQP ClientµÄ·´ÐòÁл¯Îó²î£¬£¬£¬£¬£¬£¬£¬µ±Óë²»ÊÜÐÅÈÎAMQPЧÀÍÆ÷½»»¥Ê±£¬£¬£¬£¬£¬£¬£¬¿Í»§¶ËµÄ¶þ½øÖÆ·´ÐòÁл¯¿É±»ÀÄÓ㬣¬£¬£¬£¬£¬£¬¹¥»÷Õß¿ÉÄÜÖ´ÐÐí§Òâ´úÂë¡£¡£¡£¡£ËäÔÚ2.1.0ÒýÈëallow/deny°×Ãûµ¥ÒÔÏÞÖÆ·´ÐòÁл¯£¬£¬£¬£¬£¬£¬£¬µ«ÔÚijЩÌõ¼þÏ¿ɱ»Èƹý¡£¡£¡£¡£Îó²îÆÀ·Ö9.8·Ö£¬£¬£¬£¬£¬£¬£¬Îó²î¼¶±ðÑÏÖØ¡£¡£¡£¡£
¶þ¡¢Ó°Ïì¹æÄ£
Èý¡¢Çå¾²²½·¥
3.1 Éý¼¶°æ±¾
ÏÂÔØÁ´½Ó£ºhttps://activemq.apache.org/
¾©¹«Íø°²±¸11010802024551ºÅ