cve/2017/CVE-2017-12174.md

### [CVE-2017-12174](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12174)
![](https://img.shields.io/static/v1?label=Product&message=HornetQ%2FArtemis&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3D%20before%202.4.0%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-400&color=brighgreen)

### Description

It was found that when Artemis and HornetQ before 2.4.0 are configured with UDP discovery and JGroups discovery a huge byte array is created when receiving an unexpected multicast message. This may result in a heap memory exhaustion, full GC, or OutOfMemoryError.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/ARPSyndicate/cvemon