PT-2020-2099 · Apache+1 · Apache Xml-Rpc+1

Guillaume Teissier · Published 2020-01-23 · Updated 2024-01-22 · CVE-2019-17570

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Apache XML-RPC (affected versions not specified)

Description The issue is related to an untrusted deserialization error in the org.apache.xmlrpc.parser.XmlRpcResponseParser:addResult method of the Apache XML-RPC library. This error is associated with the deserialization of server-side exceptions serialized in the faultCause attribute of XML-RPC error response messages. Exploitation of this issue could allow a remote attacker to access confidential data, compromise data integrity, and cause a denial of service. A malicious XML-RPC server could target an XML-RPC client, causing it to execute arbitrary code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

BDU:2020-01960

CVE-2019-17570

DLA-2078-1

DSA-4619-1

GHSA-6VWP-35W3-XPH8

GHSA-X2R6-4M45-M4JP

MGASA-2020-0077

OESA-2022-1545

OESA-2022-2096

RHSA-2020:0310

USN-4496-1

Affected Products

Apache Xml-Rpc

Ubuntu

References · 42

• 🔥 https://github.com/orangecertcc/security-research/security/advisories/GHSA-x2r6-4m45-m4jp · Exploit
• 🔥 https://github.com/r00t4dm/CVE-2019-17570 · Exploit
• 🔥❌ https://github.com/fbeasts/xmlrpc-common-deserialization · Exploit, Deleted
• 🔥❌ https://github.com/orangecertcc/xmlrpc-common-deserialization · Exploit, Deleted
• https://safe-surf.ru/specialists/bulletins-nkcki/646116 · Security Note
• https://osv.dev/vulnerability/DSA-4619-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2022-1545 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I3QCRLJYQRGVTIYF4BXYRFSF3ONP3TBF · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2019-17570 · Security Note
• https://access.redhat.com/errata/RHSA-2020:0310 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-6vwp-35w3-xph8 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-17570 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2022-2096 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-2078-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-17570 · Security Note