PT-2017-19423 · Xstream · Xstream

Published 2017-04-30 · Updated 2017-04-30

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions XStream (affected versions not specified)

Description A vulnerability was found in XStream where parsing a maliciously crafted file could cause the application to crash. This occurs when the processed stream at unmarshalling type contains type information that advises XStream to create an instance of the primitive type void, which does not exist. This situation can only happen if an attacker was able to manipulate the incoming data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

MGASA-2017-0119

Affected Products

Xstream

References · 4

• https://advisories.mageia.org/MGASA-2017-0119.html · Security Note
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/NINYW4L2T4MRN4RGENSWNBLOTKM7WD3T · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2017-0119 · Vendor Advisory
• https://bugs.mageia.org/show_bug.cgi?id=20704 · Note