PT-2017-19423 · Xstream · Xstream

Publicado 2017-04-30 · Atualizado 2017-04-30

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions XStream (affected versions not specified)

Description A vulnerability was found in XStream where parsing a maliciously crafted file could cause the application to crash. This occurs when the processed stream at unmarshalling type contains type information that advises XStream to create an instance of the primitive type void, which does not exist. This situation can only happen if an attacker was able to manipulate the incoming data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

MGASA-2017-0119

Produtos afetados

Xstream

Referências · 4

• https://advisories.mageia.org/MGASA-2017-0119.html · Nota de Segurança
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/NINYW4L2T4MRN4RGENSWNBLOTKM7WD3T · Aviso do Fabricante
• https://osv.dev/vulnerability/MGASA-2017-0119 · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=20704 · Nota