https://bugzilla.redhat.com/show_bug.cgi?id=1441538
Bug ID: 1441538
Summary: XStream: DoS when unmarshalling void type
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: anemec(a)redhat.com
CC: abhgupta(a)redhat.com, aileenc(a)redhat.com,
alazarot(a)redhat.com, bkearney(a)redhat.com,
bmcclain(a)redhat.com, cbillett(a)redhat.com,
chazlett(a)redhat.com, dblechte(a)redhat.com,
eedri(a)redhat.com, etirelli(a)redhat.com,
gklein(a)redhat.com, gvarsami(a)redhat.com,
java-maint(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jcoleman(a)redhat.com, jmatthew(a)redhat.com,
kconner(a)redhat.com, kseifried(a)redhat.com,
kverlaen(a)redhat.com, ldimaggi(a)redhat.com,
lpetrovi(a)redhat.com, lsurette(a)redhat.com,
mbaluch(a)redhat.com, mgoldboi(a)redhat.com,
michal.skrivanek(a)redhat.com, mizdebsk(a)redhat.com,
mmccune(a)redhat.com, msimacek(a)redhat.com,
msrb(a)redhat.com, mwinkler(a)redhat.com,
nwallace(a)redhat.com, ohadlevy(a)redhat.com,
pavelp(a)redhat.com, rbalakri(a)redhat.com,
Rhev-m-bugs(a)redhat.com, rrajasek(a)redhat.com,
rwagner(a)redhat.com, rzhang(a)redhat.com,
sherold(a)redhat.com, srevivo(a)redhat.com,
tcunning(a)redhat.com, tiwillia(a)redhat.com,
tjay(a)redhat.com, tkirby(a)redhat.com,
tlestach(a)redhat.com, tsanders(a)redhat.com,
ydary(a)redhat.com, ykaul(a)redhat.com
A vulnerability was found in XStream. Parsing a maliciously crafted file could
cause the application to crash.
The processed stream at unmarshalling type contains type information to
recreate the formerly written objects. XStream creates therefore new instances
based on these type information. The crash occurrs if this information advices
XStream to create an instance of the primitive type 'void'. This situation can
only happen if an attacker was able to manipulate the incoming data, since such
an instance does not exist.
References:
http://seclists.org/oss-sec/2017/q2/9
--
You are receiving this mail because:
You are on the CC list for the bug.