DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Red Hat Enterprise Linux (xstream): Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2021-10-24
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux in der Komponente xstream ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen, einen Denial of Service Zustand herzustellen und vertrauliche Informationen offenzulegen.
01
beschreibt (14)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-39152US | high8.5 | — | ||
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to request data from internal resources… | ||||
| CVE-2021-39150US | high8.5 | — | ||
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to request data from internal resources… | ||||
| CVE-2021-39140US | medium6.3 | — | ||
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to allocate 100% CPU time on the target… | ||||
| CVE-2021-39154US | high8.5 | — | ||
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from… | ||||
| CVE-2021-39153US | high8.5 | — | ||
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from… | ||||
| CVE-2021-39151US | high8.5 | — | ||
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from… | ||||
| CVE-2021-39149US | high8.5 | — | ||
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from… | ||||
| CVE-2021-39148US | high8.5 | — | ||
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from… | ||||
| CVE-2021-39147US | high8.5 | — | ||
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from… | ||||
| CVE-2021-39146US | high8.5 | — | ||
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from… | ||||
| CVE-2021-39145US | high8.5 | — | ||
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from… | ||||
| CVE-2021-39144US | high8.5OT kritisch | KEV | ||
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker has sufficient rights to execute command… | ||||
| CVE-2021-39141US | high8.5 | Exploit | ||
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from… | ||||
| CVE-2021-39139US | high8.8 | — | ||
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Oracle Linux Security Advisory ELSA-2021-3956 vom 2021-10-25external
- Red Hat Security Advisory vom 2021-10-24external
- Red Hat Security Advisory RHSA-2021:4767 vom 2021-11-23external
- Red Hat Security Advisory RHSA-2021:4918 vom 2021-12-02external
- Red Hat Security Advisory RHSA-2022:0296 vom 2022-01-26external
- Red Hat Security Advisory RHSA-2022:0297 vom 2022-01-26external
- Red Hat Security Advisory RHSA-2022:0520 vom 2022-02-14external
- Red Hat Security Advisory RHSA-2023:1303 vom 2023-03-17external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan