DeutschShown in its original language — a full translation is planned for a future version.
Red Hat Enterprise Linux (xstream): Mehrere Schwachstellen
view advisory published 2021-10-24
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux in der Komponente xstream ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen, einen Denial of Service Zustand herzustellen und vertrauliche Informationen offenzulegen.
01
describes (14)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-39152US | high8.5 | — | ||
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to request data from internal resources… | ||||
| CVE-2021-39150US | high8.5 | — | ||
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to request data from internal resources… | ||||
| CVE-2021-39140US | medium6.3 | — | ||
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to allocate 100% CPU time on the target… | ||||
| CVE-2021-39154US | high8.5 | — | ||
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from… | ||||
| CVE-2021-39153US | high8.5 | — | ||
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from… | ||||
| CVE-2021-39151US | high8.5 | — | ||
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from… | ||||
| CVE-2021-39149US | high8.5 | — | ||
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from… | ||||
| CVE-2021-39148US | high8.5 | — | ||
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from… | ||||
| CVE-2021-39147US | high8.5 | — | ||
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from… | ||||
| CVE-2021-39146US | high8.5 | — | ||
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from… | ||||
| CVE-2021-39145US | high8.5 | — | ||
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from… | ||||
| CVE-2021-39144US | high8.5OT critical | KEV | ||
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker has sufficient rights to execute command… | ||||
| CVE-2021-39141US | high8.5 | Exploit | ||
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from… | ||||
| CVE-2021-39139US | high8.8 | — | ||
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2021-3956 vom 2021-10-25external
- Red Hat Security Advisory vom 2021-10-24external
- Red Hat Security Advisory RHSA-2021:4767 vom 2021-11-23external
- Red Hat Security Advisory RHSA-2021:4918 vom 2021-12-02external
- Red Hat Security Advisory RHSA-2022:0296 vom 2022-01-26external
- Red Hat Security Advisory RHSA-2022:0297 vom 2022-01-26external
- Red Hat Security Advisory RHSA-2022:0520 vom 2022-02-14external
- Red Hat Security Advisory RHSA-2023:1303 vom 2023-03-17external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan