CVE-2024-23897: Apache ActiveMQ Artemis FileLock NoSuchFileException Vulnerability

Vulnerability Overview This vulnerability involves a security issue identified as , affecting the class in Apache ActiveMQ Artemis. The issue arises because the method in the class throws a when attempting to acquire a file lock if the file does not exist, rather than creating the file and proceeding with execution. This behavior can lead to application crashes or anomalous behavior during startup. Impact Scope Affected Versions: Apache ActiveMQ Artemis 2.30.0 and earlier. Affected Component: class. Impact Scenario: When the application attempts to acquire a file lock, a is thrown if the file does not exist, resulting in application crashes or unexpected behavior. Remediation Fixed Version: Apache ActiveMQ Artemis 2.31.0 and later. Fix Measure: In the method of the class, if the file does not exist, it is now created before attempting to acquire the file lock. This prevents the from being thrown and ensures the application starts up correctly. POC Code Summary This vulnerability is caused by the class not properly handling the scenario where the file does not exist during lock acquisition, leading to an exception. The fix involves creating the file before attempting to acquire the lock, ensuring the application runs normally at startup. Users are advised to upgrade to Apache ActiveMQ Artemis 2.31.0 or later to mitigate this issue.

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2024-23897: Apache ActiveMQ Artemis FileLock NoSuchFileException Vulnerability