It was found that Apache ActiveMQ client exposed a remote shutdown command in the ActiveMQConnection class. An attacker could use this flaw to achieve denial of service on a client.
Upstream commit: https://git-wip-us.apache.org/repos/asf?p=activemq.git;h=b8fc78e resolved via https://issues.apache.org/jira/browse/AMQ-6470