GHSA-w395-hpq9-7xwr

ghsaUSosv

Apache Geode unsafe deserialization in TcpServer

view advisory published 2022-05-14Licence: CC-BY-4.0

In Apache Geode before v1.4.0, the TcpServer within the Geode locator opens a network port that deserializes data. If an unprivileged user gains access to the Geode locator, they may be able to cause remote code execution if certain classes are present on the classpath.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2017-15692US	critical9.8	4.78% (92nd)	—	2018-02-27
In Apache Geode before v1.4.0, the TcpServer within the Geode locator opens a network port that deserializes data. If an unprivileged user gains access to the Geode locator, they m…

references

External citations — patches, advisories, analysis.

https://github.com/apache/geode/pull/1166WEB
https://issues.apache.org/jira/browse/GEODE-3923WEB
https://lists.apache.org/thread/dctjhhjtomnsk625dj90dg4sgm438k0kWEB
https://nvd.nist.gov/vuln/detail/CVE-2017-15692ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan