[Bug 1535411] CVE-2018-1051 resteasy: Unsafe unmarshalling in YamlProvider allows code execution
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1535411
Doran Moppert <dmoppert(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=moderate,public=2018 |impact=moderate,public=2018
|0118,reported=20180117,sour |0118,reported=20180117,sour
|ce=researcher,cvss3=8.1/CVS |ce=researcher,cvss3=8.1/CVS
|S:3.0/AV:N/AC:H/PR:N/UI:N/S |S:3.0/AV:N/AC:H/PR:N/UI:N/S
|:U/C:H/I:H/A:H,cwe=CWE-20,b |:U/C:H/I:H/A:H,cwe=CWE-20,b
|pms-6/resteasy=notaffected, |pms-6/resteasy=notaffected,
|brms-6/resteasy=notaffected |brms-6/resteasy=notaffected
|,jdg-6/resteasy=new,jdv-6/r |,jdg-6/resteasy=new,jdv-6/r
|esteasy=new,eap-5/resteasy= |esteasy=new,eap-5/resteasy=
|wontfix,eap-6/resteasy=wont |wontfix,eap-6/resteasy=wont
|fix,eap-7/resteasy=wontfix, |fix,eap-7/resteasy=wontfix,
|soap-5/resteasy=new,fsw-6/r |soap-5/resteasy=new,fsw-6/r
|esteasy=new,fuse-6/resteasy |esteasy=new,fuse-6/resteasy
|=notaffected,jon-3/resteasy |=notaffected,jon-3/resteasy
|=notaffected,jpp-6/resteasy |=notaffected,jpp-6/resteasy
|=new,rhsso-7/resteasy=new,r |=new,rhsso-7/resteasy=new,r
|hn_satellite_6/resteasy=won |hn_satellite_6/resteasy=won
|tfix,sam-1/resteasy=wontfix |tfix,sam-1/resteasy=wontfix
|,rhev-m-4/eap7-resteasy-yam |,rhev-m-4/eap7-resteasy-yam
|l-provider=wontfix,rhmap-4/ |l-provider=wontfix,rhmap-4/
|millicore=notaffected,rhel- |millicore=notaffected,rhel-
|7/resteasy-base=new,rhel-8/ |7/resteasy-base=notaffected
|resteasy=affected,fedora-al |,rhel-8/resteasy=affected,f
|l/resteasy=affected |edora-all/resteasy=affected
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 10 months
[Bug 1535411] CVE-2018-1051 resteasy: Unsafe unmarshalling in YamlProvider allows code execution
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1535411
--- Comment #18 from Doran Moppert <dmoppert(a)redhat.com> ---
Statement:
This issue only affects applications which have the YamlProvider explicitly
enabled by adding or appending a file with the name
'META-INF/services/javax.ws.rs.ext.Providers' to your WAR, or JAR with the
contents 'org.jboss.resteasy.plugins.providers.YamlProvider'
resteasy-base as shipped in Red Hat Enterprise Linux 7 does not include
YamlProvider.
Red Hat Subscription Asset Manager version 1 is now in a reduced support phase
receiving only Critical impact security fixes. This issue has been rated as
having Moderate security impact and is not currently planned to be addressed in
future updates.
This issue affects the versions of resteasy as shipped with Red Hat Satellite
version 6, however Satellite version 6 does not use the affected functionality.
Red Hat Product Security has rated this issue as having Moderate security
impact. A future update may address this issue.
For additional information, refer to the Issue Severity Classification:
https://access.redhat.com/security/updates/classification/.
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 10 months
[Bug 1535411] CVE-2018-1051 resteasy: Unsafe unmarshalling in YamlProvider allows code execution
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1535411
Doran Moppert <dmoppert(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=moderate,public=2018 |impact=moderate,public=2018
|0118,reported=20180117,sour |0118,reported=20180117,sour
|ce=researcher,cvss3=8.1/CVS |ce=researcher,cvss3=8.1/CVS
|S:3.0/AV:N/AC:H/PR:N/UI:N/S |S:3.0/AV:N/AC:H/PR:N/UI:N/S
|:U/C:H/I:H/A:H,cwe=CWE-20,b |:U/C:H/I:H/A:H,cwe=CWE-20,b
|pms-6/resteasy=notaffected, |pms-6/resteasy=notaffected,
|brms-6/resteasy=notaffected |brms-6/resteasy=notaffected
|,jdg-6/resteasy=new,jdv-6/r |,jdg-6/resteasy=new,jdv-6/r
|esteasy=new,eap-5/resteasy= |esteasy=new,eap-5/resteasy=
|wontfix,eap-6/resteasy=wont |wontfix,eap-6/resteasy=wont
|fix,eap-7/resteasy=wontfix, |fix,eap-7/resteasy=wontfix,
|soap-5/resteasy=new,fsw-6/r |soap-5/resteasy=new,fsw-6/r
|esteasy=new,fuse-6/resteasy |esteasy=new,fuse-6/resteasy
|=notaffected,jon-3/resteasy |=notaffected,jon-3/resteasy
|=notaffected,jpp-6/resteasy |=notaffected,jpp-6/resteasy
|=new,rhsso-7/resteasy=new,r |=new,rhsso-7/resteasy=new,r
|hn_satellite_6/resteasy=won |hn_satellite_6/resteasy=won
|tfix,sam-1/resteasy=wontfix |tfix,sam-1/resteasy=wontfix
|,rhev-m-4/eap7-resteasy-yam |,rhev-m-4/eap7-resteasy-yam
|l-provider=wontfix,rhmap-4/ |l-provider=wontfix,rhmap-4/
|millicore=notaffected,rhel- |millicore=notaffected,rhel-
|7/resteasy-base=new,rhel-8/ |7/resteasy-base=new,rhel-8/
|resteasy=new,fedora-all/res |resteasy=affected,fedora-al
|teasy=affected |l/resteasy=affected
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 10 months
[Bug 1441538] New: XStream: DoS when unmarshalling void type
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1441538
Bug ID: 1441538
Summary: XStream: DoS when unmarshalling void type
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: anemec(a)redhat.com
CC: abhgupta(a)redhat.com, aileenc(a)redhat.com,
alazarot(a)redhat.com, bkearney(a)redhat.com,
bmcclain(a)redhat.com, cbillett(a)redhat.com,
chazlett(a)redhat.com, dblechte(a)redhat.com,
eedri(a)redhat.com, etirelli(a)redhat.com,
gklein(a)redhat.com, gvarsami(a)redhat.com,
java-maint(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jcoleman(a)redhat.com, jmatthew(a)redhat.com,
kconner(a)redhat.com, kseifried(a)redhat.com,
kverlaen(a)redhat.com, ldimaggi(a)redhat.com,
lpetrovi(a)redhat.com, lsurette(a)redhat.com,
mbaluch(a)redhat.com, mgoldboi(a)redhat.com,
michal.skrivanek(a)redhat.com, mizdebsk(a)redhat.com,
mmccune(a)redhat.com, msimacek(a)redhat.com,
msrb(a)redhat.com, mwinkler(a)redhat.com,
nwallace(a)redhat.com, ohadlevy(a)redhat.com,
pavelp(a)redhat.com, rbalakri(a)redhat.com,
Rhev-m-bugs(a)redhat.com, rrajasek(a)redhat.com,
rwagner(a)redhat.com, rzhang(a)redhat.com,
sherold(a)redhat.com, srevivo(a)redhat.com,
tcunning(a)redhat.com, tiwillia(a)redhat.com,
tjay(a)redhat.com, tkirby(a)redhat.com,
tlestach(a)redhat.com, tsanders(a)redhat.com,
ydary(a)redhat.com, ykaul(a)redhat.com
A vulnerability was found in XStream. Parsing a maliciously crafted file could
cause the application to crash.
The processed stream at unmarshalling type contains type information to
recreate the formerly written objects. XStream creates therefore new instances
based on these type information. The crash occurrs if this information advices
XStream to create an instance of the primitive type 'void'. This situation can
only happen if an attacker was able to manipulate the incoming data, since such
an instance does not exist.
References:
http://seclists.org/oss-sec/2017/q2/9
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 10 months
[Bug 1441542] New: XStream: DoS when unmarshalling void type [fedora-all]
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1441542
Bug ID: 1441542
Summary: XStream: DoS when unmarshalling void type [fedora-all]
Product: Fedora
Version: 25
Component: xstream
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: mizdebsk(a)redhat.com
Reporter: anemec(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com, msimacek(a)redhat.com
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedora. While only
one tracking bug has been filed, please correct all affected versions at
the same time. If you need to fix the versions independent of each other,
you may clone this bug as appropriate.
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 10 months
[Bug 1598330] New: CVE-2017-7957 XStream: DoS when unmarshalling void type [fedora-all]
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1598330
Bug ID: 1598330
Summary: CVE-2017-7957 XStream: DoS when unmarshalling void
type [fedora-all]
Product: Fedora
Version: 28
Component: xstream
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: mizdebsk(a)redhat.com
Reporter: dmoppert(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
lkundrak(a)v3.sk, mizdebsk(a)redhat.com,
msimacek(a)redhat.com
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedora. While only
one tracking bug has been filed, please correct all affected versions at
the same time. If you need to fix the versions independent of each other,
you may clone this bug as appropriate.
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 10 months
[Bug 1584407] CVE-2018-10886 ant: arbitrary file write vulnerability / arbitrary code execution using a specially crafted zip file
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1584407
Doran Moppert <dmoppert(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=moderate,public=2018 |impact=moderate,public=2018
|0605,reported=20180529,sour |0605,reported=20180529,sour
|ce=researcher,cvss3=5.3/CVS |ce=researcher,cvss3=5.3/CVS
|S:3.0/AV:L/AC:L/PR:N/UI:R/S |S:3.0/AV:L/AC:L/PR:N/UI:R/S
|:U/C:L/I:L/A:L,cwe=CWE-20,f |:U/C:L/I:L/A:L,cwe=CWE-20->
|edora-all/ant=affected,rhel |CWE-22,fedora-all/ant=affec
|-5/ant=wontfix,rhel-6/ant=w |ted,rhel-5/ant=wontfix,rhel
|ontfix,rhel-7/ant=affected, |-6/ant=wontfix,rhel-7/ant=a
|rhel-8/ant=affected,rhn_sat |ffected,rhel-8/ant=affected
|ellite_6/ant=notaffected,rh |,rhn_satellite_6/ant=notaff
|n_satellite_5/ant=wontfix |ected,rhn_satellite_5/ant=w
| |ontfix
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 10 months