TI-2021-16530 CVE-2021-39144 · GHSA-j9h8-phrw-h4fh
XStream is vulnerable to a Remote Command Execution attack
Priority CRITICAL 96KEV
XStream is a simple library to serialize objects to XML and back again.
RHSA-2021:3956
xstream security update
Released 2021-10-25 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client Optional (v. 7) xstream-1.3.1-16.el7_9, xstream-javadoc-1.3.1-16.el7_9
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) xstream-1.3.1-16.el7_9, xstream-javadoc-1.3.1-16.el7_9
- Red Hat Enterprise Linux Server Optional (v. 7) xstream-1.3.1-16.el7_9, xstream-javadoc-1.3.1-16.el7_9
- Red Hat Enterprise Linux Workstation Optional (v. 7) xstream-1.3.1-16.el7_9, xstream-javadoc-1.3.1-16.el7_9
Fixes 14 records
TI-2021-16528 CVE-2021-39141 · GHSA-g5w6-mrj7-75h2
XStream is vulnerable to an Arbitrary Code Execution attack
Priority MEDIUM 61
XStream is a simple library to serialize objects to XML and back again.
TI-2021-16532 CVE-2021-39146 · GHSA-p8pq-r894-fm8f
XStream is vulnerable to an Arbitrary Code Execution attack
Priority MEDIUM 60
XStream is a simple library to serialize objects to XML and back again.
TI-2021-16538 CVE-2021-39152 · GHSA-xw4p-crpj-vjx2
A Server-Side Forgery Request vulnerability in XStream via HashMap unmarshaling
Priority MEDIUM 56
XStream is a simple library to serialize objects to XML and back again.
TI-2021-16526 CVE-2021-39139 · GHSA-64xx-cq4q-mf44
XStream is vulnerable to an Arbitrary Code Execution attack
Priority MEDIUM 53
XStream is a simple library to serialize objects to XML and back again.
TI-2021-16540 CVE-2021-39154 · GHSA-6w62-hx7r-mw68
XStream is vulnerable to an Arbitrary Code Execution attack
Priority MEDIUM 52
XStream is a simple library to serialize objects to XML and back again.
TI-2021-16539 CVE-2021-39153 · GHSA-2q8x-2p7f-574v
XStream is vulnerable to an Arbitrary Code Execution attack
Priority MEDIUM 52
XStream is a simple library to serialize objects to XML and back again.
TI-2021-16537 CVE-2021-39151 · GHSA-hph2-m3g5-xxv4
XStream is vulnerable to an Arbitrary Code Execution attack
Priority MEDIUM 52
XStream is a simple library to serialize objects to XML and back again.
TI-2021-16535 CVE-2021-39149 · GHSA-3ccq-5vw3-2p6x
XStream is vulnerable to an Arbitrary Code Execution attack
Priority MEDIUM 52
XStream is a simple library to serialize objects to XML and back again.
TI-2021-16534 CVE-2021-39148 · GHSA-qrx8-8545-4wg2
XStream is vulnerable to an Arbitrary Code Execution attack
Priority MEDIUM 52
XStream is a simple library to serialize objects to XML and back again.
TI-2021-16533 CVE-2021-39147 · GHSA-h7v4-7xg3-hxcc
XStream is vulnerable to an Arbitrary Code Execution attack
Priority MEDIUM 52
XStream is a simple library to serialize objects to XML and back again.
TI-2021-16531 CVE-2021-39145 · GHSA-8jrj-525p-826v
XStream is vulnerable to an Arbitrary Code Execution attack
Priority MEDIUM 52
XStream is a simple library to serialize objects to XML and back again.
TI-2021-16536 CVE-2021-39150 · GHSA-cxfm-5m4g-x7xp
A Server-Side Forgery Request vulnerability in XStream via PriorityQueue unmarshaling
Priority MEDIUM 51
XStream is a simple library to serialize objects to XML and back again.
TI-2021-16527 CVE-2021-39140 · GHSA-6wf9-jmg9-vxcc
XStream can cause a Denial of Service
Priority MEDIUM 44
XStream is a simple library to serialize objects to XML and back again.