Red Hat Security AdvisoryRHSA-2021:0162
xstream security update
Released 2021-01-18 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client Optional (v. 7) xstream-1.3.1-12.el7_9, xstream-javadoc-1.3.1-12.el7_9
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) xstream-1.3.1-12.el7_9, xstream-javadoc-1.3.1-12.el7_9
- Red Hat Enterprise Linux Server Optional (v. 7) xstream-1.3.1-12.el7_9, xstream-javadoc-1.3.1-12.el7_9
- Red Hat Enterprise Linux Workstation Optional (v. 7) xstream-1.3.1-12.el7_9, xstream-javadoc-1.3.1-12.el7_9
Fixes 1 record
Priority CRITICAL 87
XStream before version 1.4.14 is vulnerable to Remote Code Execution.The vulnerability may allow a remote attacker to run arbitrary shell commands only by manipulating the processed input stream.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.84968 · Published 2020-11-16 · Partial fix · 1.4.14, 1.4.14-java7 CWE-78
